summaryrefslogtreecommitdiff
path: root/tshark.c
AgeCommit message (Collapse)AuthorFilesLines
2009-09-08Add an option to col_fill_in() to allow us to disable column expression ↵Kovarththanan Rajaratnam1-1/+1
processing. This is rarely needed. It's only needed when the user right clicks on the packet list view to generate a display filter. svn path=/trunk/; revision=29806
2009-09-08Make tshark and rawshark use build_column_format_array() instead of ↵Kovarththanan Rajaratnam1-42/+2
duplicating the code svn path=/trunk/; revision=29803
2009-09-07Store the packet encapsulation type as gint8. Saves 3 bytes per packetKovarththanan Rajaratnam1-1/+3
svn path=/trunk/; revision=29767
2009-09-06Split a bunch of init routines into init() and cleanup(). This allows us to ↵Kovarththanan Rajaratnam1-3/+7
free memory properly on shutdown. This is an initial step. There's still some work to do. svn path=/trunk/; revision=29754
2009-08-13Introduce epan_dissect_init()/epan_dissect_cleanup(). These are used to ↵Kovarththanan Rajaratnam1-11/+13
initialise/cleanup stack allocated 'edt' structures. This should speed up dissection since we avoid some malloc traffic. svn path=/trunk/; revision=29404
2009-08-08Note that the new behavior matches what Wireshark does.Guy Harris1-1/+1
svn path=/trunk/; revision=29333
2009-08-07tshark: console_log_level preference now controls which log msgs are sent to ↵Bill Meier1-6/+41
stderr; Note: This is a behavior change: Given the default value for the console_log_level preference tshark will now show ERROR, CRITICAL and WARNING level log messages. Prior to this change tshark was hardwired to show only ERROR and CRITICAL level messages. Time will tell whether this change results in too much noise in tshark output. svn path=/trunk/; revision=29328
2009-07-27From Kovarththanan Rajaratnam:Anders Broman1-1/+1
Only fill in frame_data vals when needed. svn path=/trunk/; revision=29203
2009-07-23From Kovarththanan Rajaratnam:Anders Broman1-0/+7
Precompile custom columns filters. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3767 svn path=/trunk/; revision=29174
2009-07-08Clarify that "-w" specifies a *pcap-format* file to be written to.Guy Harris1-1/+2
svn path=/trunk/; revision=29029
2009-06-05Have tap listeners specify whether the "packet" routine requiresGuy Harris1-11/+40
a protocol tree; the column values. This includes stats-tree listeners. Have the routines to build the packet list, and to retap packets, honor those requirements. This means that cf_retap_packets() no longer needs an argument to specify whether to construct the column values or not, so get rid of that argument. This also means that there's no need for a tap to have a fake filter to ensure that the protocol tree will be built, so don't set up a fake "frame" filter. While we're at it, clean up some cases where "no filter" was represented as a null string rather than a null pointer. Have a routine to return an indication of the number of tap listeners with filters; use that rather than the global num_tap_filters. Clean up some indentation and some gboolean vs. gint items. svn path=/trunk/; revision=28645
2009-03-22Change the signature of init_progfile_dir() so the casting of theGuy Harris1-1/+1
function pointer (to main) to an argument to dladdr() is done in init_progfile_dir() rather than its callers. svn path=/trunk/; revision=27814
2009-03-22In Solaris, the second argument to dladdr() is just a void *, not aGuy Harris1-2/+1
const void *. svn path=/trunk/; revision=27813
2009-03-22Attempt to use dladdr() to get the pathname of the executable image ifGuy Harris1-1/+2
it's available and works. svn path=/trunk/; revision=27812
2009-03-15From Jakub Zawadzki:Stig Bjørlykke1-2/+1
More remove checking for NULL before g_free(). svn path=/trunk/; revision=27728
2009-02-15For tshark -b -S -w: close files after reading them; fixes bug #3172;Bill Meier1-7/+10
Also: Do a bit of cleanup on related code. svn path=/trunk/; revision=27458
2009-02-15Add a routine to report write errors to the list of failure-reportingGuy Harris1-4/+16
routines handled by epan/report_err.c. Move copy_binary_file() in file.c to epan/filesystem.c, and rename it to copy_file_binary_mode() (to clarify that it *can* copy text files; arguably, *all* files are "binary" unless you're on, say, an IBM 1401 :-)). Have it use the report_err.c routines, so it works in console-mode programs. Clean up some comments while we're at it. svn path=/trunk/; revision=27456
2009-02-07#include <epan/conversation.h> not req'd ...Bill Meier1-1/+0
svn path=/trunk/; revision=27392
2008-10-03add a -K command line option to provide the name of the kerberos keytab Ronnie Sahlberg1-1/+7
file to use for decryption of Krb5 and GSS-KRB svn path=/trunk/; revision=26343
2008-08-26#include <emem.h> not req'dBill Meier1-1/+0
svn path=/trunk/; revision=26093
2008-08-19The packet counts and drop counts reported by libpcap are unsigned.Guy Harris1-12/+12
Clean up indentation a bit. svn path=/trunk/; revision=26037
2008-06-30Move privileges.c and unicode-utils.c from epan to wsutil (so things likeJeff Morriss1-1/+1
capinfos and dumpcap don't need to depend on libwireshark nor directly pull in those modules). Because capinfos and editcap were only being linked with privileges.c if we had plugins, this allows those programs to be linked when someone is compiling --without-plugins. svn path=/trunk/; revision=25640
2008-06-23Rename capture_opts to global_capture_opts - that's what it's called inGuy Harris1-37/+37
dumpcap, and calling it capture_opts collides with parameter names, as noted by John Smith. svn path=/trunk/; revision=25545
2008-05-30Free up the err_info string returned by wtap_read().Guy Harris1-0/+2
svn path=/trunk/; revision=25399
2008-05-22Move the file utility functions from wiretap to libwsutil so thatJeff Morriss1-2/+1
libwireshark (and the plugins using those functions) do not depend on wiretap on Windows. While doing that, rename the eth_* functions to ws_*. svn path=/trunk/; revision=25354
2008-05-06Removed an unused break.Stig Bjørlykke1-1/+0
svn path=/trunk/; revision=25247
2008-04-30Get rid of extra blank lines at the end of the file.Guy Harris1-2/+0
svn path=/trunk/; revision=25202
2008-04-30Use report_failure() to report failures in capture_sync.c; that will doGuy Harris1-23/+1
the right thing in Wireshark and TShark, as both of them call epan_init() to set the appropriate "report an error" function. That obviates the need to have TShark have its own private version of simple_dialog(). Have cmdarg_err() just call failure_message() instead of duplicating the code in failure_message(). svn path=/trunk/; revision=25201
2008-04-03http://www.wireshark.org/lists/wireshark-dev/200803/msg00308.htmlLuis Ontanon1-0/+2
proto.[hc] define new APIs to allow delayed registration of protocol fields, so that dissectors with "flexible" fields like xml, radius, diameter, snmp do not have to load their files at startup but can do so as late as possible. gtk/dfilter_expr_dlg.c : have the expression dialog registering all prefixes so that all fileds appear in the dialog tshark.c register all prefixes when called with -G epan/radius_dict.l epan/dissectors/packet-radius.c epan/dissectors/packet-radius.h refactor registration to delay dictionary loading as long as possible svn path=/trunk/; revision=24762
2008-03-21Make tshark and rawshark behave similar to wireshark when ↵Sake Blok1-4/+8
"frame.time_delta_displayed" is used within a display filter. (the usefullness of "frame.time_delta_displayed" in a display filter is very limited since it bites it's own tail. Still, wireshark and tshark should at least show the same behaviour) svn path=/trunk/; revision=24708
2008-03-17Allow tshark to print custom columns.Stig Bjørlykke1-1/+8
svn path=/trunk/; revision=24678
2008-03-01Custom column updates:Stephen Fisher1-2/+2
- Change apply / prepare / ... as filter to use the field's value, which is now stored in fdata as well as cinfo. Now we don't have to reprocess the entire packet list when using these features. This also prevents the use of these features from overwriting custom column information. (custom columns can now be used in apply / prepare ... as filter) - Break col_expr and col_expr_val out into a struct that is included not only in cinfo, but now also fdata. - Have col_custom_set_fstr() quote FT_STRING & FT_STRINGZ when storing the col_expr_val value (for filter creation). svn path=/trunk/; revision=24511
2008-02-15Make -c work properly in tshark when a read filter is used.Sake Blok1-3/+4
svn path=/trunk/; revision=24335
2008-02-03More rewrite of prohibited APIs (sprintf, strcpy, strcat).Stig Bjørlykke1-3/+2
svn path=/trunk/; revision=24258
2008-02-03From Balint Reczey (bug 2233):Sake Blok1-0/+28
The attached patch makes the Statistics -> RTP -> Show All Streams feature of wireshark accessible via tshark. I found it helpful in dealing with tons of RTP captures. svn path=/trunk/; revision=24252
2008-01-14This patch adds support for configuration profiles, which can be used toStig Bjørlykke1-1/+13
configure and use more than one set of preferences and configuration files. This can be found in the "Configuration Profiles..." menu item from the Edit menu, or by pressing Shift-Ctrl-A. It's also possible to start wireshark and tshark with a named profile by using the "-C ProfileName" option. A new status pane in the main window will show the current profile. The configuration files currently stored in the Profiles are: - Preferences - Capture Filters - Display Filters - Coloring Rules - Disabled Protocols - User Accessible Tables The recent data are by design not added to the profile. Planned future enhancements: - make a more convenient function to switch between profiles - add a "clone profile" button to copy an existing profile - make the profiles list active and accept return as OK - save users "Decode as" in the profile - make new, clone and deletion of profiles more secure - make some of the recent values available in the profile This patch also fixes: - setting default status pane sizes - a bug setting status pane for packets when not having main lower pane. svn path=/trunk/; revision=24089
2008-01-14Fixed a few "statement not reached" warnings and a "assignment type ↵Stig Bjørlykke1-3/+0
mismatch" warning. svn path=/trunk/; revision=24085
2007-12-14Warning fixes: function declaration isn’t a prototypeJörg Mayer1-2/+2
svn path=/trunk/; revision=23862
2007-11-22If we only captured 1 packet, print "1 packet", not "1 packets".Guy Harris1-1/+2
svn path=/trunk/; revision=23543
2007-11-19Introduce a new field type called FT_EBCDIC. This field works the same asStephen Fisher1-0/+2
FT_STRING, except that it converts the data from the packet from EBCDIC to ASCII for display in Wireshark. svn path=/trunk/; revision=23503
2007-10-24"sa_mask" in a "struct sigaction" is a sigset_t, which is notGuy Harris1-2/+2
necessarily an integral data type. Use sigemptyset() to clear it. svn path=/trunk/; revision=23257
2007-10-24Use sigaction(), not signal(), so we know what its semantics are (and soGuy Harris1-29/+21
that we can find out what the signal action for SIGHUP is without changing it). That renders report_counts() safe to use at the end of a capture; do so. Clean up indentation. svn path=/trunk/; revision=23256
2007-10-01Add 'C' as a valid -N option in error message.Bill Meier1-1/+2
svn path=/trunk/; revision=23040
2007-09-29Get rid of a forward declaration of a routine that no longer exists.Guy Harris1-2/+0
svn path=/trunk/; revision=23030
2007-09-29Clean up indentation a bit.Guy Harris1-16/+22
Count packets even if we're not dissecting them. svn path=/trunk/; revision=23026
2007-09-28Specify that -l causes tshark to flush the *standard* output (from bug ↵Jeff Morriss1-1/+1
1875). The man page already states this svn path=/trunk/; revision=23014
2007-09-27Load wpcap.dll, since we still use it for some things. This should hopefullyGerald Combs1-14/+12
fix Buildbot. svn path=/trunk/; revision=23003
2007-09-27(Try to) get tshark capturing working on *NIX (it works for me anyway):Jeff Morriss1-47/+57
We can simply block waiting for input from the child process because we are in a CLI that does not need to worry about updating a GUI while we're waiting for packets and so forth. Before I realized that I wrote a working (for me) method using select() that I've left in for now (#ifdef'd out). svn path=/trunk/; revision=22999
2007-09-26the Ubuntu / OS X buildbots don't seem to like G_STATIC_MUTEX_INIT (for ↵Ulf Lamping1-1/+1
whatever reason), try to use g_static_mutex_init() instead svn path=/trunk/; revision=22977
2007-09-26solve some more of the unix specific buildbot problemsUlf Lamping1-10/+9
svn path=/trunk/; revision=22975
generated by cgit v1.2.1 (git 2.18.0) at 2024-07-13 22:42:32 +0000