CVS log entries from 14.01.2001 (Sun) 10:06:43 - 15.01.2001 (Mon) 10:07:04 GMT
=====================================================
Summary by authors
=====================================================
Author: guy
File: libpcap/gencode.c; Revisions: 1.146, 1.145
File: tcpdump/tcpdump.1; Revisions: 1.96, 1.95
File: tcpdump/print-ipx.c; Revisions: 1.30, 1.29, 1.28
File: tcpdump/print-smb.c; Revisions: 1.9, 1.8
File: libpcap/ethertype.h; Revisions: 1.12
File: tcpdump/print-sll.c; Revisions: 1.4
File: tcpdump/print-llc.c; Revisions: 1.35, 1.34, 1.33
File: libpcap/llc.h; Revisions: 1.1
File: tcpdump/ipx.h; Revisions: 1.4, 1.3
File: tcpdump/interface.h; Revisions: 1.151, 1.150
File: libpcap/FILES; Revisions: 1.12
File: tcpdump/llc.h; Revisions: 1.9
Author: mcr
File: htdocs/index.html; Revisions: 1.25
=====================================================
Combined list of identical log entries
=====================================================
Description:
I've seen captures with all four different flavors of IPX frames on
Ethernet, so, at least on Ethernet, when checking for IPX frames, check
for all of them, including Ethernet_II and Ethernet_SNAP.
Add an "llc.h" file with LLC SAP values, taken from tcpdump's "llc.h"
file, and use those, rather than defining them ourselves in "gencode.c".
Modified files:
File: libpcap/FILES; Revision: 1.12;
Date: 2001/01/14 21:26:52; Author: guy; Lines: (+1 -0)
File: libpcap/ethertype.h; Revision: 1.12;
Date: 2001/01/14 21:26:52; Author: guy; Lines: (+7 -4)
File: libpcap/gencode.c; Revision: 1.145;
Date: 2001/01/14 21:26:52; Author: guy; Lines: (+71 -44)
File: libpcap/llc.h; Revision: 1.1;
Date: 2001/01/14 21:26:53; Author: guy;
-------------------------------
Description:
LLC frames with a DSAP and LSAP of 0xe0 are IPX frames, and so are Linux
cooked frames with a type value of LINUX_SLL_P_802_3; dissect them as
such.
Modified files:
File: tcpdump/llc.h; Revision: 1.9;
Date: 2001/01/15 00:33:59; Author: guy; Lines: (+4 -1)
File: tcpdump/print-llc.c; Revision: 1.33;
Date: 2001/01/15 00:33:59; Author: guy; Lines: (+27 -1)
File: tcpdump/print-sll.c; Revision: 1.4;
Date: 2001/01/15 00:33:59; Author: guy; Lines: (+8 -1)
-------------------------------
Description:
IPX socket 0x85be is for Cisco EIGRP over IPX.
Modified files:
File: tcpdump/ipx.h; Revision: 1.3;
Date: 2001/01/15 00:43:59; Author: guy; Lines: (+2 -1)
File: tcpdump/print-ipx.c; Revision: 1.28;
Date: 2001/01/15 00:43:59; Author: guy; Lines: (+4 -1)
-------------------------------
Description:
Do some additional bounds checking when dissecting SMB packets.
Modified files:
File: tcpdump/interface.h; Revision: 1.151;
Date: 2001/01/15 03:59:13; Author: guy; Lines: (+2 -2)
File: tcpdump/print-llc.c; Revision: 1.35;
Date: 2001/01/15 03:59:13; Author: guy; Lines: (+2 -2)
File: tcpdump/print-smb.c; Revision: 1.9;
Date: 2001/01/15 03:59:14; Author: guy; Lines: (+20 -11)
-------------------------------
Description:
Handle IPX socket 0x553, which is some kind of NetBIOS-over-IPX socket.
(We call it "nwlink-dgm" for now; Ethereal calls it a NWLink SMB
datagram.)
Don't throw every LLC frame with unknown SAPs at the NetBIOS-over-IPX
dissector; just throw the frames for IPX sockets 0x455 and 0x553 at it,
as those appear to be the sockets used (if there are any others, please
add them to the IPX dissector - putting it back in the LLC dissector
won't help, as all IPX frames, including LLC frames, should now be
handed to the IPX dissector).
Do better bounds checking in "ipx_netbios_print()" and
"netbeui_print()", i.e. don't go past the end of the captured data in
the packet when looking for the 0xFF S M B signature.
Modified files:
File: tcpdump/interface.h; Revision: 1.150;
Date: 2001/01/15 03:23:58; Author: guy; Lines: (+2 -2)
File: tcpdump/ipx.h; Revision: 1.4;
Date: 2001/01/15 03:23:59; Author: guy; Lines: (+3 -2)
File: tcpdump/print-ipx.c; Revision: 1.30;
Date: 2001/01/15 03:23:59; Author: guy; Lines: (+6 -1)
File: tcpdump/print-llc.c; Revision: 1.34;
Date: 2001/01/15 03:24:00; Author: guy; Lines: (+1 -9)
File: tcpdump/print-smb.c; Revision: 1.8;
Date: 2001/01/15 03:24:00; Author: guy; Lines: (+20 -5)
=====================================================
Log entries
=====================================================
Description:
fixed 0.6.2 comment
Modified files:
File: htdocs/index.html; Revision: 1.25;
Date: 2001/01/14 18:44:37; Author: mcr; Lines: (+2 -2)
-------------------------------
Description:
Check for all four types of IPX frame on DLT_LINUX_SLL captures.
Modified files:
File: libpcap/gencode.c; Revision: 1.146;
Date: 2001/01/15 00:03:40; Author: guy; Lines: (+37 -7)
-------------------------------
Description:
IPX SAP requests don't have service names in them, they just have a
service type.
Fix the bounds check for the body of an IPX SAP response.
Modified files:
File: tcpdump/print-ipx.c; Revision: 1.29;
Date: 2001/01/15 02:23:25; Author: guy; Lines: (+11 -14)
-------------------------------
Description:
The filter expression "ether proto ipx" now checks for all four count
'em four different types of IPX frames on Ethernet.
Modified files:
File: tcpdump/tcpdump.1; Revision: 1.96;
Date: 2001/01/15 00:36:51; Author: guy; Lines: (+4 -4)
-------------------------------
Description:
I lied - we *do* dissect IPX frames, it turns out.
Update the description of "ether proto" to explain all the stuff we do
to check for IPX frames.
Modified files:
File: tcpdump/tcpdump.1; Revision: 1.95;
Date: 2001/01/14 21:04:45; Author: guy; Lines: (+8 -5)
=====================================================
Summary of modified files
=====================================================
File: htdocs/index.html
Revisions: 1.25
Authors: mcr (+2 -2)
-------------------------------
File: libpcap/FILES
Revisions: 1.12
Authors: guy (+1 -0)
-------------------------------
File: libpcap/ethertype.h
Revisions: 1.12
Authors: guy (+7 -4)
-------------------------------
File: libpcap/gencode.c
Revisions: 1.146, 1.145
Authors: guy (+37 -7), guy (+71 -44)
-------------------------------
File: libpcap/llc.h
Revisions: 1.1
Authors: guy
-------------------------------
File: tcpdump/interface.h
Revisions: 1.151, 1.150
Authors: guy (+2 -2), guy (+2 -2)
-------------------------------
File: tcpdump/ipx.h
Revisions: 1.4, 1.3
Authors: guy (+3 -2), guy (+2 -1)
-------------------------------
File: tcpdump/llc.h
Revisions: 1.9
Authors: guy (+4 -1)
-------------------------------
File: tcpdump/print-ipx.c
Revisions: 1.30, 1.29, 1.28
Authors: guy (+6 -1), guy (+11 -14), guy (+4 -1)
-------------------------------
File: tcpdump/print-llc.c
Revisions: 1.35, 1.34, 1.33
Authors: guy (+2 -2), guy (+1 -9), guy (+27 -1)
-------------------------------
File: tcpdump/print-sll.c
Revisions: 1.4
Authors: guy (+8 -1)
-------------------------------
File: tcpdump/print-smb.c
Revisions: 1.9, 1.8
Authors: guy (+20 -11), guy (+20 -5)
-------------------------------
File: tcpdump/tcpdump.1
Revisions: 1.96, 1.95
Authors: guy (+4 -4), guy (+8 -5)
--
Automatic cron job from /tcpdump/bin/makelog
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
[tcpdump-workers] Automatic report from sources (tcpdump libpcap htdocs) between 14.01.2001 - 15.01.2001 GMT
Automatic cvs log generator /tcpdump/bin/makelog Mon, 15 Jan 2001 02:17:41 -0800
