Commit Graph

45169 Commits

Author SHA1 Message Date
Kaige Ye 2cc887e80d MySQL: Add dissector for binlog event HEARTBEAT_LOG_EVENT_V2 2022-07-27 06:33:34 +00:00
John Thacker ae1c630025 QUIC: Use the stored datagram info for follow filter
Using the addresses and ports to retrieve the QUIC connection
has issues with connection migration. We deal with that in
the QUIC dissector and store that information in proto data.

Use that proto data for generating the follow filter from a
selected packet. This makes it more robust to connection migration
and cases where different QUIC connections reuse the same UDP
5-tuple.
2022-07-26 20:12:06 -04:00
Chuck Craft c4f9831412 gtpv2: adjust field size and bitmask for gtpv2.smenb
Closes #18225
2022-07-26 15:20:06 -05:00
KATAOKA, Toshihiro 7a75c638ac ORAN: Block FP improvement, additional correction
optimized add_tree for hf_oran_iSample, hf_oran_qSample as float.
2022-07-26 15:15:45 +00:00
KATAOKA, Toshihiro 6189eee63f Improvemnet Block FP decompression, common in case both U plane/C plane.
1. Block FP is used in both U plane I.Q. samples and C plane beamforming
   weight decompression.
2. excluded digital power scaling(DPS) out of BFP decompression, i.e. (1<<15)
   bits shift, because DPS is applied only U plane.
3. added digital power scaling to be called from U plane I.Q. samples
   calculation.
4. improved U plane I.Q. samples calculation similar logic used in C
   plane bfw calculation.
5. improved U plane I.Q. samples index start from '0'.

reference: O-RAN WG4.CUS.0 v.09.00.
 8.1.2 and 8.1.3 for clarification, digital power scaling applied only U
   plane.
 annex A.1.2 and A.1.3 for clarification, digital power scaling not
included in Block FP.
 annex D for I.Q. smples index
2022-07-26 15:15:45 +00:00
KATAOKA, Toshihiro c41a27b96d ORAN: eAxC ID flexible bit allocations 2022-07-26 15:13:25 +00:00
Martin Mathieson 9c2cbc842a PDCP_NR: Show direction in more sequence analysis expert output 2022-07-26 11:56:02 +00:00
John Thacker b093b6a992 epan: Make find_or_create_conversation create what it finds and vice versa
The endpoint elements pinfo->conv_endpoint and pinfo->conv_elements
cause find_or_create_conversation (via find_conversation_pinfo) to
look for conversations based on those endpoints. It should also
make it create conversations based on those endpoints, so that
subsequent calls find the same conversation it just created instead
of repeatedly creating new ones.
2022-07-25 20:35:56 +00:00
John Thacker cb3fd3b5cd quic: Handle out-of-order CRYPTO frames, aka "Chaos Protection"
Implement out of order buffering and desegmentation for QUIC
CRYPTO frames. Particularly useful for Chrome's "Chaos Protection"
that intentionally introduces them, but handles out of order
CRYPTO frames in different UDP payloads as well. (Buffering
packets at a higher encryption level until the out of order
lower level frames have arrived is a different issue.)

Adds a preference, which defaults to on since if there is
out of order, it's not very useful to turn it off.

Fix #17732. Fix #18215.
2022-07-24 23:27:38 -04:00
Gerald Combs 3bb40a586d wslua: Rename wslua_util.c to wslua_utility.c.
Rename wslua_util.c to wslua_utility.c so that our file name has the
form "wslua_<lower case lua module name>.c", which is the case for our
other modules.
2022-07-24 17:11:57 +00:00
Gerald Combs c252852c9d [Automatic update for 2022-07-24]
Update manuf, services enterprise numbers, translations, and other items.

Asterix failed.
2022-07-24 16:37:40 +00:00
Marius David 73910a3319 Update Keysight/Ixia netflow fields support. 2022-07-24 10:02:05 +00:00
Dr. Lars Völker 832687cc74 UDS: Change Symbol Names as of ISO 14229-1:2020 Amd1
In ISO 14229-1:2020 there is a conflict of symbol names. These will be
resolved in the ISO 14229-1:2020 Amd1. This patch already implements
this change.
2022-07-23 18:53:09 +02:00
Dr. Lars Völker 90ac880b8a TECMP: Fix CRC decoding on FlexRay Null Frames (Bugfix)
Skipping FlexRay Null Frame Payload to avoid bogus CRC values.
2022-07-23 15:39:40 +00:00
João Valverde 5f85c1f8aa dfilter: Use an exact floating-point string representation
The FTREPR_DFILTER format for floating-point numbers
is using an inexact representation so using "apply as
filter" on a floating-point protocol field does not produce a
match, as could be reasonably expected, because we don't
get back the same floating-point number.

Using g_ascii_dtostr() instead produces a string with enough
precision to get back the same machine number with IEEE 754 doubles.

Fixes #16483.
2022-07-23 01:08:31 +01:00
Gerald Combs fd830dff58 wslua+lrexlib: Fixup our dependencies and paths.
Add a register_wslua target and have lrexlib depend on it so that
declare_wslual.h is generated in the right order. The working directory
when we create declare_wslua.h and register_wslua.c is epan/wslua,
so there's no need to explicitly set it. Remove an unneeded lrexlib
include path.
2022-07-22 19:08:13 +00:00
John Thacker 74082386de DVB-S2: Store whether low roll-off values are used in conversation data
It's possible to have a capture that has multiple DVB-S2[X] streams
on different UDP or RTP ports that use different roll-off values.
Store the information about whether we've transitioned into the
lower roll-off range in conversation data instead of in a global.
2022-07-22 17:56:25 +00:00
Dr. Lars Völker 3e7ea95108 TECMP: Adding Subdissector support
Adding subdissector support based on interface_id. This allows to write
custom dissectors for e.g. UART/RS232 data.
2022-07-22 17:40:06 +00:00
Dr. Lars Völker d92af30f29 SOME/IP: Remove legacy datatype support
Signal PDUs over SOME/IP can be dissected since Wireshark 3.6 directly.
The workaround for SOME/IP to support signal dissection (legacy data
types) is therefore not needed anymore and is removed to cleanup the
dissector code.

This patch might make it necessary to regenerate the Wirehark config.
The Fibex-Converter was already updated.
2022-07-22 17:24:45 +00:00
Dr. Lars Völker b1edbd337f TECMP: Show unparsed payload of control messages 2022-07-22 17:08:29 +00:00
John Thacker 9d284afa90 quic: Handle multiple Client Initial messages before a server initial
If there are multiple Client Initial messages before the first server
response (e.g., a long fragmented TLS Client Hello), we won't recognize
the client ID from the server connection and we need to look it up
in the list of initial connections.
2022-07-22 10:22:13 -04:00
Kaige Ye 158becb733 MySQL: support COM_REGISTER_SLAVE 2022-07-22 06:28:57 +00:00
Roi Berkovich 4702e3bfad WLAN: fix IEEE802.11 dissection bug
When parsing wlan header above capwap, first two bytes are swapped (fcf
and flag). the offset was handled incorrectly, causing wireshark to
display incorrect fcf data in the tree summery and completely wrong
flags information (in the case of swap, the flags point to the same
byte as the fcf)
2022-07-22 05:49:01 +00:00
Gerald Combs b9ee6f4563 wslua: Fix more argument definitions. 2022-07-21 17:38:22 -07:00
Chuck Craft 9f59cae607 wslua: tapinfo - add state to debug info; update wsluarm
Test wth:
for _,tap_name in pairs(Listener.list()) do
  foo1 = Listener.new(tap_name)
  print (foo1)
end
2022-07-21 21:17:36 +00:00
Alexis La Goutte 0ed87211da proto.h: Fix -Wdocumentation
proto.h:3004:9: warning: parameter 'return_value' not found in the function declaration [-Wdocumentation]
2022-07-21 21:01:25 +00:00
Roland Knall 1f3f41391c addr_resolv: Add port correctly
Add the port correctly if only one dns server is configured
2022-07-21 09:59:16 +00:00
Gerald Combs fbadb8c785 wslua: Capitalize words in our markup.
Capitalize words in our markup instead of depending on make-wsluarm.pl.
Add a single space after "Mode:".
2022-07-20 14:52:40 -07:00
Nardi Ivan 897bc6d27c HTTP2: display the full request URI
Close #18135
2022-07-20 16:32:47 +00:00
Dr. Lars Völker cadcd7d261 Signal-PDU: Add Header Field for Signal PDU Name
This patch allows to filter on the name of the PDU as well as add a
column based on the names.
2022-07-20 16:15:19 +00:00
Eugène Adell 2068ec0f95 TCP: Fix conversation overlapping when reusing ports 2022-07-20 15:53:46 +00:00
Ferry Huberts cab1ae7794 Locamation Interface Module dissector: simplify the Windows build fix 2022-07-20 15:29:49 +00:00
Roland Knall 596c8e9095 Addr_resolv: Use int for ports 2022-07-20 14:49:34 +00:00
John Thacker 0b780341cb tls: Show reassembled in for the first fragment
Similar to TCP, properly display what frame a fragmented
TLS message was reassembled_in for the first fragment on
a second pass. Also similar to TCP, don't bother to add the
reassembled_in field for fragments that are reassembled
in the same frame.
2022-07-20 14:13:59 +00:00
John Thacker 3a57dd522b Use WS_ROUNDUP_4 in more dissectors
Several more dissectors define their own "round up the length
to a 4 byte word boundary" macros. Use the new common macro
in wsutil/ws_roundup.h instead.
2022-07-20 13:59:56 +00:00
Roland Knall bf89153aa0 addr_resolve: Allow for port to be configured
If nameservers use a different default port than 53, Wireshark
is not able to resolve, as it always assumes the default port.

This allows to configure both tcp/udp ports for name resolutions,
with the udp port being asked first and tcp only used for fallback

Implements #18214
2022-07-20 13:46:15 +00:00
Ferry Huberts 6699b33276 Locamation Interface Module dissector for IM1: fix the Windows build 2022-07-20 13:43:32 +00:00
Ferry Huberts 0a42b0976b Locamation Interface Module dissector for IM1
Signed-off-by: Ferry Huberts <ferry.huberts@pelagic.nl>
2022-07-20 06:25:51 +00:00
John Thacker f4fb92745e Diameter: Allow diameter command code text to be added to custom column
Create the command value string when loading the dictionary and
assign it to the command code field when registering it. This
makes it behave like any other value_string for adding to a custom
column (allowing resolved and unresolved), etc.

It could be changed to use a wmem_array instead of a GArray, as is
currently done with the AVPs.

Fix #16833. (Note that solving the analogous issue for the AVP
code text is more complicated, since the interpretation depends
on the vendor ID.)
2022-07-20 00:58:43 +00:00
Gerald Combs 3acd20fabe CMake+lrexlib: Another include path fix attempt. 2022-07-19 13:57:54 -07:00
Gerald Combs 9d96b301de CMake+lrexlib: Add another include path.
Include paths will be added until morale improves.
2022-07-19 13:04:44 -07:00
Gerald Combs 56a9666a3a wslua: Fix our argument definitions.
Make sure our argument definitions match their corresponding function
names.
2022-07-19 18:53:11 +00:00
João Valverde 84f54d54e5 dfilter: Fix a crash using abs()
Passing a literal value to abs() on the LHS segfaults, because it
is incorrectly assumed to be a valid field.

We need to check if we actually have a field. While at it improve
the diagnostic of literals.
2022-07-19 19:11:47 +01:00
Dr. Lars Völker 9e84721c1a TECMP: Updating to TECMP 1.7
The following changes are part of this patch:
- Make signed integer for analog default
- Analog Sample Time 0 is reserved now
- Updating Data Flags TX for CAN, CAN-FD, LIN, FlexRay, UART
- Show Parity Bits of LIN
- Expert Warning, when FlexRay Header CRC overflows into reserved bits
2022-07-19 15:25:56 +00:00
Dr. Lars Völker dec99a5f42 UDS: Adding IDs and Names for 2020 standard
This patch adds IDs and Names for:
- New UDS Services (0x29, 0x84, 0x86, 0x87)
- New ReadDTCInformation SubFunctions
- New Negative Response Codes

This patch does not dissection support for the new UDS Services.
2022-07-19 15:12:19 +00:00
John Thacker aa1c6db337 Diameter: Remove dead code for pre Internet Draft 16 protocol
There's some code intended to decode an older Internet Draft version
of Diameter, before December 2002. It's supposed to be set by an
obsolete enum preference, but due to a misunderstanding, it's
been dead code for the last 15 years. No one has complained in that
time, so instead of bringing the preference back and resurrecting
it, remove it and shrink the memory usage of the diameter dissector.

Related to #16833, as it will make adding the command code value
string simpler.
2022-07-18 23:31:41 -04:00
Gerald Combs 953c6f73aa CMake+lrexlib: Fix our include paths.
Try to fix

C:\gitlab-builds\builds\-fyeYoMP\0\wireshark\wireshark\epan\wslua\lrexlib\pcre2\../../wslua.h(52,1): fatal error C1083: Cannot open include file: 'epan/wslua/declare_wslua.h': No such file or directory [C:\gitlab-builds\builds\-fyeYoMP\0\wireshark\wireshark\build\epan\wslua\lrexlib\lrexlib.vcxproj]
C:\gitlab-builds\builds\-fyeYoMP\0\wireshark\wireshark\epan\wslua\lrexlib\pcre2\../../wslua.h(52,1): fatal error C1083: #include <epan/wslua/declare_wslua.h> [C:\gitlab-builds\builds\-fyeYoMP\0\wireshark\wireshark\build\epan\wslua\lrexlib\lrexlib.vcxproj]
C:\gitlab-builds\builds\-fyeYoMP\0\wireshark\wireshark\epan\wslua\lrexlib\pcre2\../../wslua.h(52,1): fatal error C1083: ^ [C:\gitlab-builds\builds\-fyeYoMP\0\wireshark\wireshark\build\epan\wslua\lrexlib\lrexlib.vcxproj]
2022-07-18 09:47:34 -07:00
John Thacker 66978182d0 epan: Fix typo in conversation_create_endpoint_by_id 2022-07-18 12:00:42 +00:00
Kaige Ye c7afb52c84 MySQL: fix Auth Swith Request dissection 2022-07-18 09:37:17 +00:00
Gerald Combs a6b09b52b4 [Automatic update for 2022-07-17]
Update manuf, services enterprise numbers, translations, and other items.

services failed.
2022-07-17 16:38:11 +00:00