summaryrefslogtreecommitdiff
path: root/colorfilters
diff options
context:
space:
mode:
authorJesse Gross <jesse@nicira.com>2015-04-15 19:07:12 -0700
committerAnders Broman <a.broman58@gmail.com>2015-04-27 04:43:51 +0000
commit1e2867cdf0244ff2b519dfa5df11aaa8cd17ebc9 (patch)
treebc32cd293e69556e8108b2575cf426f8397ec48d /colorfilters
parenta2fb4d1a6e58a957e5ee08057fa1060be9980b7a (diff)
downloadwireshark-1e2867cdf0244ff2b519dfa5df11aaa8cd17ebc9.tar.gz
Clean up STT plugin
This adds some essential features for STT dissection including using a heuristic IP dissector to ensure we get the right traffic, segment reassembly, and additional field decoding. Based on work original done by Andrew Evans. Change-Id: Ic89d6b16803185c7f58b73935c2646d532d0ae14 Reviewed-on: https://code.wireshark.org/review/8187 Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com> Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
Diffstat (limited to 'colorfilters')
-rw-r--r--colorfilters2
1 files changed, 1 insertions, 1 deletions
diff --git a/colorfilters b/colorfilters
index c6e7eda4e0..6a96752908 100644
--- a/colorfilters
+++ b/colorfilters
@@ -9,7 +9,7 @@
@TCP RST@tcp.flags.reset eq 1@[42148,0,0][65535,64764,40092]
@SCTP ABORT@sctp.chunk_type eq ABORT@[42148,0,0][65535,64764,40092]
@TTL low or unexpected@( ! ip.dst == 224.0.0.0/4 && ip.ttl < 5 && !pim) || (ip.dst == 224.0.0.0/24 && ip.dst != 224.0.0.251 && ip.ttl != 1 && !(vrrp || carp))@[42148,0,0][60652,61680,60395]
-@Checksum Errors@eth.fcs_bad==1 || ip.checksum_bad==1 || tcp.checksum_bad==1 || udp.checksum_bad==1 || sctp.checksum_bad==1 || mstp.checksum_bad==1 || cdp.checksum_bad==1 || edp.checksum_bad==1 || wlan.fcs_bad==1@[4718,10030,11796][63479,34695,34695]
+@Checksum Errors@eth.fcs_bad==1 || ip.checksum_bad==1 || tcp.checksum_bad==1 || udp.checksum_bad==1 || sctp.checksum_bad==1 || mstp.checksum_bad==1 || cdp.checksum_bad==1 || edp.checksum_bad==1 || wlan.fcs_bad==1 || stt.checksum.bad==1@[4718,10030,11796][63479,34695,34695]
@SMB@smb || nbss || nbns || nbipx || ipxsap || netbios@[65278,65535,53456][4718,10030,11796]
@HTTP@http || tcp.port == 80 || http2@[58596,65535,51143][4718,10030,11796]
@IPX@ipx || spx@[65534,58325,58808][4718,10030,11796]