Commit Graph

375 Commits

Author SHA1 Message Date
Harald Welte 1ba3d0f25c WIP: dissector for vsmartcard protocol
Change-Id: Iba8cbe09b14fcd0644cc3d09303eab1ef71fbca3
2023-03-11 14:36:51 +01:00
Harald Welte 8fddbe2c16 WIP: Osmocom RSPRO dissector support
The Osmocom RSPRO protocol is a protocol for remote SIM card access,
i.e. extending the SIM card interface between phone/mdoem (UE) and
a remote SIM card reader.   The primary user of this protocol is
osmo-remsim software suite, which can be found at
https://osmocom.org/projects/osmo-remsim/wiki

RSPRO is specified in ASN.1 using BER and runs on top of the IPA
multiplex (protocol-gsm_ipa.c).

Change-Id: Ibcdb2c92281d05c36e3973de4d7ec4aa0cd9b207
2023-03-11 14:36:51 +01:00
Harald Welte ae38e9b092 New dissector for GSM L2RCOP (3GPP TS 27.002)
This is a dissector for the GSM "Layer 2 Relay Character Oriented
Protocol" as used in non-transparent CSD (Circuit Switched Data)
calls in GSM and UMTS cellular networks.
2023-03-10 19:55:19 +00:00
Harald Welte f64e8f0796 Add new dissector for GSM RLP protocol (3GPP TS 24.022)
This protocol is used in the user plane of non-transparent CSD (Circuit
Switched Data) calls in GSM networks. RLP frames are sent over the Um
air interface, and are sent as modified V.110 frames over 64k TDM
channels in the back-haul/core network.  For modern implementations,
this means in RFC4040  RTP CLEARMODE.

As there's no V.110 decoder in wireshark, we cannot connect the RLP
decoder to that.  However, we hook it up to the GSMTAP dissector to
enable other software to pass the decoded RLP frames into wireshark.
2023-03-10 19:55:19 +00:00
Igor Dmitriev c11cffda3c TRDP: Add dissector for TRDP protocol 2023-03-08 09:58:43 +00:00
João Valverde 6d401f2eba CMake: Add a comment about dissector headers 2023-02-12 14:50:00 +00:00
Martin Mathieson 86f7777c4c file-pcapng: Provide mechanism for 'local' block handlers 2023-02-08 13:10:48 +00:00
Martin Gallo 48737e2983 SAPDIAG: Added SAP Diag as main dissector
Added the SAP Diag dissector protocol from [SecureAuth's plugin](https://github.com/SecureAuthCorp/SAP-Dissection-plug-in-for-Wireshark/blob/master/src/packet-sapdiag.c).

This is a dissector that implements the Diag protocol. Decompression of packets is not considered as this requires the proprietary LZC/LZH decompression routines still pending to be added in #8973. The Diag packets can be wrapped in an SNC frame, in which case the respective dissector is called. Embedded RFC calls are disabled as this requires the respective dissector to be found, which will be submitted in a separate merge request.

Details about the protocol and example requests can be found in [pysap's documentation](https://pysap.readthedocs.io/en/latest/protocols/SAPDiag.html).
2023-01-25 17:06:27 +00:00
João Valverde fe7bfdf6ca CMake: Require explicit installation of development headers
Develpment headers are a sizeable part of the binary installation
and most users won't ever require them. It's recommended to package
them separately in a devel package or SDK.

Create a CMake installation component for development headers
and add the EXCLUDE_FROM_ALL property.

Headers can be installed using the invocation:

    cmake --install <dir> --component Development
2023-01-18 03:35:13 +00:00
Sergey V. Lobanov 60912daef9 LLS: add dissector for ATSC3 Low Level Signalling (LLS) Protocol
LLS dissector is implemented according to A/331:2022-11.
.pcap sample: https://wiki.wireshark.org/SampleCaptures#lls-low-level-signalling-protocol
2023-01-10 09:49:18 +01:00
Sergey V. Lobanov ff7bab1730 ALP: add dissector for ALP protocol (ATSC3.0 A/330)
This is a port of SiliconDust ALP decoder provided in public repository
https://github.com/silicondust/wireshark

Original Author: Nick Kelsey <nickk@silicondust.com>
2023-01-08 16:09:47 +00:00
Harald Welte 1be5ec9433 DECT-NWK: Initial dissector for DECT NWK layer
Change-Id: Idf0b97ce40ec5b2dd1b507a72fed64cfee288354
2022-12-21 21:30:20 +00:00
Harald Welte a13d71dab9 DECT-DLC: Initial dissector for DECT DLC protocol layer
Change-Id: Iabd75b0f9b12ea9162dc164741123feb1ba7992d
2022-12-15 12:17:29 +00:00
Martin Gallo 129ed6d4c4 SAPSNC: Added SAP SNC as main dissector 2022-11-29 13:34:38 +00:00
Bernhard Dick 534e594a34 DECT-MITEL-RFP: Begin of OMM/RFP protocol
This is the begin of a basic dissection of the proprietary protocol used
by the Mitel OMM/RFP communicatino over TCP. Currently no decryption is
supported so there is the need of external decryption.
2022-11-28 15:04:15 +00:00
Bernhard Dick a31c5923e1 DECT-MITEL-ETH: Unify naming
This commit unifies the naming within the dissector for the DECT over
Ethernet protocol within the Mitel DECT base stations (RFPs).
2022-11-28 15:04:15 +00:00
Jim Young 963877e921 discard: Implement dissector for RFC 863 2022-11-28 13:24:17 +00:00
Martin Gallo fdc211984f SAPMS: Added SAP MS as main dissector 2022-11-22 09:27:10 +00:00
Martin Gallo 82b5201f79 SAPRouter: Added SAP Router as main dissector 2022-11-21 15:01:59 +00:00
Jeremy Kerr 889e5331dc Add NVMe Management Interface (NVMe-MI) dissector
This change adds a small dissector for the NVMe-MI protocol, typically
for tunelling Administration commands over an MCTP (over I2C) channel.

We just decode the request and response headers, and leave the payload
as raw data.

Signed-off-by: Jeremy Kerr <jk@codeconstruct.com.au>
2022-11-15 09:05:05 +00:00
Jeremy Kerr baf7a3c493 Add MCTP control protocol dissector
This change adds a very basic dissector for the MCTP control protocol -
just the header fields, leaving the raw payload data.

Signed-off-by: Jeremy Kerr <jk@codeconstruct.com.au>
2022-11-15 09:05:05 +00:00
Jeremy Kerr e1cbe02cce Add Management Component Transport Protocol (MCTP) dissector
This change adds a protocol dissector for the Management Component
Transport Protocol (MCTP). This is a failry simple datagram-based
protocol for messaging between components within a single platform,
typically over I2C, serial or PCIe.

This dissector just implements the header fields, and sequence-number
based message reassembly. Inner protocols will be added as follow-up
changes.

Linux has support for AF_MCTP data, so decode from the MCTP SLL ltype.

Signed-off-by: Jeremy Kerr <jk@codeconstruct.com.au>
2022-11-15 09:05:05 +00:00
Martin Gallo 59fdaa7d07 SAPEnqueue: Added SAP Enqueue Server as main dissector 2022-11-14 20:35:17 +00:00
Martin Gallo 384bf49591 SAPHDB: Added SAP HDB as main dissector 2022-11-11 13:10:00 +00:00
Martin Gallo 0562fe46f6 SAPIGS: Added SAP IGS as main dissector 2022-11-06 14:27:25 +00:00
David Perry f2105250fa Dissector CMakeLists: custom header+support files 2022-11-01 14:13:57 +00:00
AndersBroman 3be3b2cc95 H224: Add a basic dissector
ping: #18514
2022-10-21 08:18:07 +00:00
Martin Gallo fc052615a6 SAPNI: Added SAP NI as main dissector 2022-10-16 19:59:59 +00:00
Joakim Karlsson 00f4f4ee7d JSON: add seperate 3GPP file
Moving specific 3GPP keys handle to its own file
This will also enable custom JSON string dissector
2022-10-04 10:48:08 +00:00
Michael Tuexen cf36b716b0 BBLog: refactor and update the list of events 2022-09-15 09:16:10 +00:00
Dr. Lars Völker 05916eec1f DLT: Adding support to open DLT files
This patch allows Wireshark to open DLT files directly.
2022-08-26 07:45:36 +00:00
Martin Mayer ffde66ea7c dissector: Open Control Protocol OCP.1/AES70 2022-08-24 14:20:18 +00:00
Joakim Karlsson 387a769003 PCAPNG: make dissect_block public for custom dissectors 2022-08-12 14:09:45 +02:00
Dr. Lars Völker 3e7ea95108 TECMP: Adding Subdissector support
Adding subdissector support based on interface_id. This allows to write
custom dissectors for e.g. UART/RS232 data.
2022-07-22 17:40:06 +00:00
Ferry Huberts 0a42b0976b Locamation Interface Module dissector for IM1
Signed-off-by: Ferry Huberts <ferry.huberts@pelagic.nl>
2022-07-20 06:25:51 +00:00
Thomas Vogt 95b01dc4bf GREbond: Add support for Huawei's GRE bonding (RFC8157) control protocol
This dissector is for the control messages of the GRE bonding protocol by
Huawei. These messages are encapsulated in GRE and can appear on both/all
bonding links.

During development, I made heavy use of traffic for Deutsche Telekom Hybrid
service. There fore, it also supports the first version which did not have an
IEEE assigned ethertype.
2022-06-23 19:40:25 +00:00
Aaron Turner b89a195b4c Add Roon Discovery dissector
Add support for Roon/roonlabs.com discovery running
on UDP/9003.
2022-06-08 20:02:00 +00:00
Alexander Clouter 914d8bc756 EAP: add PEAP decoder
The existing PEAP support does not decode the inner attributes, this
commit adds that support by introducing packet-peap.c which recreates
a 'pseudo' EAP header before looping the TVB back into the EAP dissector.
2022-04-30 13:30:20 +00:00
Ryan Doyle 78656fe00f Redis RESP: REdis Serialization Protocol v2 dissector
This adds support for RESP v2.
2022-03-23 13:30:10 +00:00
Damir Franusic 027f6a02e8 GDT: add dissector for SCTP PPID 49 protocol 2022-02-07 20:20:43 +00:00
Vladimir Bespalov 5ecb57cb90 Add ZBOSS NCP protocol dissector 2022-01-30 09:34:26 +00:00
Will Aftring 6a99dacf54 Add Microsoft Cluster Route Control Protocol (MSRCP) 2022-01-27 21:15:49 +00:00
Guy Harris e4b26c586c realtek: add support for some Realtek protocols.
This could be extended to handle some "switch tags" seen when capturing
from interfaces supporting the Linux DSA mechanism.
2022-01-25 22:09:57 +00:00
Jerome-PS 269e662442 Adding dissection for subsystem sftp. 2022-01-18 13:09:06 +00:00
Dario Lombardo d6a6cc72a0 cmake: fix indentation. 2022-01-17 16:38:11 +00:00
Dr. Lars Völker 382fe23aa8 UDS: add subdissector support
Adding subdissector support to UDS and allow Signal PDUs for it.

This patch supports:
- ReadDataByIdentifier (RDBI) Reply
- WriteDataByIdentifier (WDBI) Request
- RoutineControl (RC) Request
- RoutineControl (RC) Reply
2022-01-05 06:06:33 +00:00
Roman Volkov 0a4f3d62e5 mpeg table: implement Selection Information Table (SIT) 2022-01-04 20:13:09 +02:00
Dr. Lars Völker df2fef33f6 Signal-PDU: Adding support to dissect DLT payloads
This patch adds support to DLT for subdissectors and allows the Signal
PDU dissector to attach to DLT to parse non-verbose payloads.
2022-01-03 13:29:13 +00:00
Georg Sauthoff e273006a1d Add ETI/EOBI order flow/market data dissectors
The Enhanced Trading Interface (ETI) protocol and the Enhanced
Order Book Interface (EOBI) protocol are used by a few European
exchanges such as Eurex, Xetra and Börse Frankfurt.

Basically, a trader uses ETI to communicate with a matching
engine (over TCP), e.g. to add a new order, modify an existing
one, etc. while the matching engine also publicizes the current
state of the order book via EOBI over multicast UDP feeds.

ETI actually consists of two variants, i.e. ETI for derivatives
markets (such as Eurex) and ETI for cash markets (such as Xetra).
A common convention is to abbreviate them as ETI (for
derivatives) and XTI (for cash).

These protocols share the same encoding, i.e. messages start with
a length and a tag field and most messages and fields are fixed
size. See also
https://github.com/gsauthof/python-eti#protocol-introduction for
some more details.

The protocol specifications are openly available (cf.
https://github.com/gsauthof/python-eti#protocol-descriptions for
direct links) in human and machine-readable (XML) formats.

The Wireshark ETI/XTI/EOBI dissectors are code-generated by
`eti2wireshark.py`
(https://github.com/gsauthof/python-eti/blob/master/eti2wireshark.py)
which is GPL licensed. See also
https://github.com/gsauthof/python-eti#wireshark-protocol-dissectors
for usage examples and related work.
2021-12-21 08:10:43 +00:00
Antoine Gardiol 4248e5b665 5co-legacy: New FiveCo Legacy dissector 2021-12-16 09:13:37 +00:00