Commit Graph

79522 Commits

Author SHA1 Message Date
Anders Broman 1c12c99b13 Fix duplicated fileter names 2021-01-06 11:30:19 +00:00
Moshe Kaplan 21ee5be5fe WSDG: Update section "Adding a basic dissector"
Minor restructuring and clarified phrasing to
improve clarity.
2021-01-06 10:52:31 +00:00
Alex Nik 8427aef42c WAP-WSP packet counter menu item [docs] 2021-01-06 10:14:05 +00:00
Alex Nik a5e1527d9f description of the Osmux menu item 2021-01-06 09:15:19 +00:00
Alex Nik acf8f8b0b9 GSM menu item in telephony is described 2021-01-06 08:54:34 +00:00
Gerald Combs 7910a5c4ba Release notes: Fixup the new protocols section.
Fix the New Protocol Support markup and add new protocols.
2021-01-06 03:15:34 +00:00
Pascal Quantin 7ace905366 F1AP: upgrade dissector to v16.4.0 2021-01-05 22:20:08 +00:00
John Thacker d74bfc569e macos-setup: Update CMake for Apple Silicon
Apple Silicon requires CMake 3.19.2, but the binaries provided
for 3.19.2 only run on MacOS 10.10 and later, so we have more
bifurcation of the CMake we try to install. Get rid of some of
the old 2.x paths to compensate.
2021-01-05 22:00:58 +00:00
Pascal Quantin fc49e2fb6e E1AP: upgrade dissector to v16.4.0 2021-01-05 21:32:26 +00:00
Pascal Quantin b0abc6f380 XnAP: upgrade dissector to v16.4.0 2021-01-05 22:11:38 +01:00
Pascal Quantin d0bf9c1571 NGAP: upgrade dissector to v16.4.0 2021-01-05 20:33:14 +00:00
Joey Salazar 0dcf1ab024 git: parse sideband control code from pkt-lines
In Git's packfile transfer protocol[1], a pkt-line can start with \1, \2, or \3
to represent whether this line contains packfile data (1), progress information (2),
or an error (3). Parse out this information as a field to make it easier for people
debugging to filter to the pkt-lines of interest to them.

[1] https://www.kernel.org/pub/software/scm/git/docs/technical/pack-protocol.html

Related to #17093
2021-01-05 19:54:43 +00:00
Alex Nik dc8ad07ce7 The exporting PDUs to file section is written. The window screenshot is added
fixed the display filter explanation, corrected the screenshot, added the levels description

minor changes to export PDUs to file section

adding important part about exporting PDUs by AndersBroman comment

applying SME suggestions
2021-01-05 19:36:43 +00:00
Alex Nik 78bbd1784e bsmap and dtap statistics windwos are described
adding Map Operation Statistics

Implementing SME suggestion

SME suggestion is applied
2021-01-05 17:59:20 +00:00
Alex Nik fbb9ae4f47 missing is removed. the description is merged in 887 MR 2021-01-05 17:02:34 +00:00
Anders Broman d139fe3bc7 LTE-RRC: Fix duplicated filter names. 2021-01-05 15:13:12 +00:00
Alex Nik 71128b0d73 description for ISUP Messages menu item 2021-01-05 14:28:16 +00:00
Pascal Quantin 098dc4843a X2AP: upgrade dissector to v16.4.0 2021-01-05 15:06:41 +01:00
Pascal Quantin 40c1ab88da S1AP: upgrade dissector to v16.4.0 2021-01-05 13:42:31 +00:00
Alex Nik 11bec9b0b5 description of the MTP3 menu item 2021-01-05 13:22:52 +00:00
Alex Nik b816d5de5c description of the H.225 menu item 2021-01-05 13:02:34 +00:00
Martin Mathieson 445df19e7c PDCP NR: Get DRB params when RLC not present 2021-01-05 11:56:11 +00:00
Dr. Lars Völker 8902386c76 UAT: Adding support for uint64 (dec/hex), int64 (dec)
This patch adds 64bit support for uint and int to uats.
2021-01-05 11:20:47 +00:00
Stig Bjørlykke c1ba732861 Qt: Set Packet List scrollbar page step
Set the Packet List scrollbar page step to be equal to the height
of the scrollbar.

This makes page stepping using the packet list slider more natural.
2021-01-05 08:21:13 +00:00
Stig Bjørlykke 7980f25f99 Qt: Fetch OverlayScrollBar sliderPosition from the real ScrollBar
In OverlayScrollBar return the real ScrollBar sliderPosition to ensure
the correct value is used when handling the actionTriggered signal in
vScrollBarActionTriggered().

This improves turning on and off auto scroll during capture when page
stepping using the packet list slider, because the value is propagated
after this signal.
2021-01-05 08:04:14 +00:00
David Perry 718cff5264 Initial refactor of nettrace reader (#17009)
Old behaviour is to read the entire file into memory at once; provide
the XML tree as the first packet; and then individual `<msg>` elements
as subsequent packets. It did this by writing to a temporary pcapng
file.

This change causes the XML file to only be read a chunk at a time (and
be read directly, not through an intermediate pcapng). This means much
larger files can be loaded, at the cost of no longer showing the raw XML
as the first packet. This is not a loss because the file can be loaded
in MIME Files Format (or a text editor) to see the XML.

Much of the logic from the old functions `create_temp_pcapng_file()` and
`write_packet_data()` has been relocated into the new function
`nettrace_msg_to_packet()`, and is used to directly generate packet data
for wiretap instead of writing it to a temporary file.

Also includes some initial "code smell" fixes:

- Removed some duplicate `#define`s from epan/exported_pdu.h
- Replaces some magic numbers with macros from epan/exported_pdu.h
- Replaces other magic numbers with the CLEN() macro to make it easier
  to see (and debug) where sizes/offsets come from
- Use `g_strstr_len()` instead of `strstr()` to remove the need to
  insert string terminators
- Uses direct pointer math instead of indexing into a byte array

This compiles and runs, and seems to produce the same results as the old
reader (except for the XML packet). Consider it a proof of concept; it
needs further revision before being review-ready.
2021-01-04 15:20:27 +00:00
Rickard Holmberg 84eeeabde9 Update to DICOM Edition 2020e 2021-01-03 23:23:24 +01:00
Orgad Shaneh 4003a5f3ce TPNCP: Fix exception for commands/events without CID
+ Simplify length checks
2021-01-03 20:37:05 +00:00
Gerald Combs dfc05555eb [Automatic update for 2021-01-03]
Update manuf, services enterprise numbers, translations, and other items.
2021-01-03 17:38:31 +00:00
Jirka Novak 7928f81b10 RTP processing: Modified RTP sequence verification
The patch changes:
- Removed first_packet_mac_addr staff. It was commented out many years ago...
- Removed delta_timestamp item. Not used.
- Sequence verification takes into account timestamp therefore it is able to detect delayed packets more clearly. As consequence of it, #16330 is solved.
- If packet is delayed, it is not used in calculation of diff/jitter/skew. It just mess output. As consequence of it, #16330 is solved.

I checked output with many RTP streams and looks well. But I have no
sample with wrapped timestamp and I have just a few samples with
missing/reordered packets. Nevertheless all are calculated same way as
before and #16330 is solved too.
2021-01-03 16:53:21 +00:00
Dario Lombardo 85deb99637 ntp: remove size constraint for invalid refid.
When the refid contains non-ascii chars, the conversion function
returns a string longer than 4 chars. This results in an invalid
string if the output is limited to 4 bytes. Incidentally this
results in an invalid PDML output as well that caught this bug
in the first place.

Fix: #17112.
2021-01-03 14:53:28 +00:00
Martin Mathieson 41a6457ff3 PDCP-NR: Set 'cipheringDisabled' from RRC 2021-01-03 12:21:17 +00:00
Eugene Adell 4907aa5f47 TCP: Implement 2 new fields to track the connection closing initiator.
Adding tcp.connection.fin_active and tcp.connection.fin_passive to make
investigations easier. Closes #13210.
2021-01-03 10:16:56 +01:00
Eugene Adell 5b6af25fc7 TCP: First Full TCP Window is not detected
The Window field must not be scaled in SYN packets (RFC 7323), this
leads to first Full TCP Window event to be ignored. Closes #14690.
2021-01-03 08:52:11 +00:00
Jirka Novak b9e5b58ee9 RTP dialogs fix: sigv occurs when dialogs are open when no cap file is open
Patch fixes the issue which causes sigv fault when user tries to open
VoIP Analysis or RTP Streams dialog and no capture file is open.
2021-01-03 08:22:33 +01:00
Darius Davis a256ad68d6 UI: Remove apostrophe from FAQs item in Help menu.
The apostrophe in "FAQ's" is incorrect -- and inconsistent with the FAQs item
on the main website -- so it is removed from the Help menu item.
2021-01-02 22:22:27 +00:00
Stig Bjørlykke a42ab09b72 Qt: Connect QScrollbar::actionTriggered to OverlayScrollBar
This will fix the issue where auto scroll during capture is not turned
off when the scroll bar position is changed.
2021-01-02 21:34:13 +00:00
Uli Heilmeier 346bfe097f DHCP: RFC5192 PANA Authentication Agent option
Add DHCP Option for Protocol for Carrying Authentication for
Network Access (PANA) Authentication Agent (RFC5192)
2021-01-02 21:18:14 +00:00
Martin Mathieson 1b81052f9e PDCP LTE: Check configured key strings 2021-01-02 20:59:00 +00:00
John Thacker 3506735f08 macos: Clarify when xz support was added to tar
OS X 10.9 (https://opensource.apple.com/release/os-x-109.html) ships
with libarchive-29, which is compiled with LZMA/xz support; its default
[bsd]tar has xz support.  (Look for HAVE_LIBLZMA in config.h in
https://opensource.apple.com/source/libarchive/libarchive-29/)
OS X 10.8 (https://opensource.apple.com/release/mac-os-x-1084.html)
does not have xz support. Clarify the comment in case in the future
we decide we don't need to install xz-utils once the minimum macOS
version is 10.9 or greater.
2021-01-02 19:44:01 +00:00
John Thacker fbd3fb3138 GnuTLS: Bump minimum version to 3.3.0
Every supported distribution has at least the 3.3 branch of GnuTLS
(stable branch starting in April 2014). That branch was maintained
for bug-fixes until July 2018, so some distributions (e.g. RHEL7,
SUSE Enterprise 12) are still on it, keeping us from requiring 3.4 yet.
Also clarify a comment about when the Mac OS build of gnutls started
being compiled with pkcs11 support.
2021-01-02 19:00:51 +00:00
Jirka Novak fd6c5e6a9b RTP analysis: Dialog uses common calculation function
UpdateStatistics method uses common rtpstream_info_calculate function.
2021-01-02 14:47:05 +00:00
Jirka Novak f0c703e22d RTP Player: x axis centering correction
When waveform start much later than at time 0s, centering of waveform
was incorrect. The reason was that range was taken before rescalingAxes.
Patch solves the issue.
2021-01-02 14:30:57 +00:00
Eugene Adell 962ff4883f TCP: Fix port reuse giving a wrong relative seq number
In rare circumstances such as in the issue 16944, we would
see wrong relative sequence numbers. Closes #16944.
2021-01-02 13:22:00 +00:00
Pascal Quantin b5a0ba896b DOP: regenerate dissector from ASN.1 source 2021-01-02 13:19:33 +01:00
Pascal Quantin 77151a2801 CMP: regenerate dissector from ASN.1 source 2021-01-02 13:19:22 +01:00
Paolo Abeni 7844e267ec mptcp: fix relative DSN/ACK for additional v1 subflows.
In MPTCP v1, in the MPC handshake, the first key is carried by
the SYN/ACK packet: when the mptcp analysis context is created,
the forward direction comes from the server. That is the opposite
of what used to happen with MPTCP v0 - the initial SYN already
carried the sender key.

As a result, when a later MP_JOIN subflows attach to an existing
MPTCP connection v1, the mptcp_subflow meta points to the wrong
flow, and the relative DSN/ACK_SEQ decoding for such flows gives
pseudo-random results.

This change addresses the issue by swapping the MPTCP meta for
MP_JOIN flows after mptcp_get_meta_from_token(), if the negotiated
version for the relevant MPTCP connection is v1.
2021-01-02 11:05:09 +00:00
Eugene Adell 1455b6e82d MPTCP: Fix false Duplicate ACKs
Duplicate ACKs are tolerated when MPTCP send different options on
two different pure ACK packets. Closes #15881.
2021-01-02 10:23:43 +00:00
Eugene Adell e38e412239 MPTCP: Correct Apply as column for the subflows field
The packet details field for the subflow stream ids shows values
that we also want when applied as a  column. Closes #17103.
2021-01-02 09:56:43 +00:00
Jirka Novak 976c560bea RTP Player: Fix for #16452
Reason for #16452 is that RTP Player dialog is destroyed before tap
finishes when Escape key pressed. The only solution I found is to check
whether dialog does exists when tap finishes. If so, data are processed
and shown. If dialog was destroyed in meanwhile, no data processing is done.
2021-01-02 08:02:35 +00:00