Commit Graph

80158 Commits

Author SHA1 Message Date
Alexis La Goutte 71f4712532 ncsi: Fix warning found by Clang Analyzer
packet-ncsi.c:653:55: warning: Although the value stored to 'offset' is used in the enclosing expression, the value is never actually read from 'offset' [deadcode.DeadStores]
2021-03-12 12:33:52 +00:00
Alexis La Goutte c3687757b9 mbim: Fix warning found by Clang Analyzer
packet-mbim.c:2871:5: warning: Value stored to 'offset' is never read [deadcode.DeadStores]
packet-mbim.c:2976:5: warning: Value stored to 'offset' is never read [deadcode.DeadStores]
packet-mbim.c:4053:9: warning: Value stored to 'offset' is never read [deadcode.DeadStores]
2021-03-12 12:33:52 +00:00
Vahap Emin Ağaoğulları ed2955cf4c PTP: PTPv2 dissection updates
PTPv2 dissection dissected according to IEE Std 802.1AS-2011
This dissection updated according to IEE Std 802.1AS-2020.
2021-03-12 10:42:52 +00:00
ishaangandhi ee64d6362c ICMP: Support MTU in RFC 5837
This commit parses MTU's from interface identification objects when possible. Previously, they were unread.
2021-03-12 08:53:43 +00:00
Guy Harris c473eba8dc observer: rename source and update name.
Name the source to the code to read Observer files after the file
format, not the company that created it, got bought by JDSU, and then
ended up in Viavi when JDSU split.

Refer to the file format as "Viavi Observer" to reflect that.
2021-03-11 16:01:27 -08:00
Guy Harris 2561f1e9f8 libwiretap: don't have a central table of file type/subtype name mappings.
Let individual file type/subtype modules register their
backwards-compatibility names, rather than having a centralized table
that would need to be updated along with the module.
2021-03-11 13:56:40 -08:00
Guy Harris 98485a1c27 pcapng: small cleanups in pcap_open().
We don't need to initialize first_section before calling
pcapng_read_section_header_block(); it doesn't depend on it being
initialized, and sets byte_swapped, version_major, and version_minor if
what it reads is a valid SHB, so we don't need to set those in
pcap_open().

We don't need to set shb_off until we've deemed this to be a pcapng
file, so do so at the same point that we initialize

We also don't need to initialize wblock until we call
pcapng_read_section_header_block(), so do so all in one place.
2021-03-11 12:49:24 -08:00
Guy Harris e0afa7f2a4 Observer is now a product of Viavi.
JDSU bought Network Instruments, and then split into Viavi and Lumentum,
with Viavi getting Observer.
2021-03-11 20:02:14 +00:00
Nardi Ivan 20a6fea312 EAP: fix a memory leak 2021-03-11 19:52:38 +01:00
Jorge Mora 74d432ecc4 NFS: fix for EXCHANGE_ID SP4_SSV
The hash and encryption algorithms are arrays of OIDs.
2021-03-11 13:07:47 +00:00
Jirka Novak 24d59017a6 RTP Player: Added additional shortcuts
Added shortcuts:
- Mute/Unmute/Invert Mute
- Play/Pause/Stop

Removed outdated help in tooltip text. It makes no sense to use it, all
actions are available in context menu.
2021-03-11 12:44:48 +00:00
Guy Harris aab0bd12a5 pcapng: clean up pcapng_block_read().
Instead of pcapng_open() calling pcap_block_read() to do all the work of
reading the initial SHB, have it do the read of the initial SHB itself,
by calling the same routines that pcap_block_read() calls.

That way, pcap_block_read() doesn't have to be prepared to be called to
read that block, so it can treat all issues with an SHB that it reads as
errors, rather than possibly reporting them as "not a pcapng file", and
it doesn't have to support being called without a pointer to the
pcapng_t for the file being read, as it no longer ever is.  It can now
just return a gboolean success/failure indication.

That makes pcapng_open() a little more complicated but it makes
pcap_block_read() less complicated.

Fix some use of : as ' in comments while we're at it.
2021-03-11 10:27:36 +00:00
Martin Mathieson fa9d8fbc85 VP8: Show details of version field 2021-03-11 10:00:11 +00:00
Valerii Zapodovnikov 584442fd6d VP8 RTP: fixed wrong bit for "show bit" 2021-03-11 09:26:44 +00:00
Guy Harris a52ab28013 pcapng dissection: fix dissection of the if_filter IDB option.
Show the first octet of the option, giving the filter type.

Only display the rest of the option as a string if the type is 0,
meaning it's a libpcap-style filter string.

While we're at it, clean up the dissection of the rest of the options:

* do more proto_tree_add_item_ret_XXX to get the option value;
* don't bother constructing a string for the value if we don't have to;
* use proto_tree_add_item_ret_display_string for string values, so we
know they're printable.
2021-03-11 08:31:07 +00:00
Alexis La Goutte 73de7b1325 NAN(WiFi): Fix wrong variable size
NDPE Attribute is not dissected

Issue (and fix) reported by Darren Chen

Closed #17278
2021-03-11 07:58:45 +00:00
Chuck Craft 63b484c91a Qt: Copy->Value - don't zero pad hex values
Closes #17276
Update test scripts and datafiles for corrected output format.
2021-03-11 07:17:58 +00:00
Preston Hunt 11b7d17951 IEEE 802.11: add PASN authentication algorithm 2021-03-11 06:44:29 +00:00
Guy Harris f669bf2ec9 pcapng: ignore if_filter options with an unknown type.
We don't know how to process the type, so just ignore it.
2021-03-11 04:44:19 +00:00
Ronald Wahl 6210256229 LLDP: Allow organizational specific TLVs without payload
Currently organizational specific TLVs without payload cause an
exception which leads to a 'malformed packet' error. Add a check that
allows correctly parsing those TLVs.
2021-03-11 02:42:33 +01:00
Guy Harris 7446a16247 pcapng: get rid of the local pcapng_t in pcapng_open().
Pass a null pointer to pcapng_read_block(), instead.  In
pcapng_read_block(), treat that as the indication that we're trying to
read the purported first SHB, rather than treating a null section_info
pointer as that indication.

This addreses one, but not all, of the problems reported in issue #17281.
2021-03-10 22:06:58 +00:00
Martin Mathieson 933e7f5eb6 DECT: "tranceiver" -> "transceiver" 2021-03-10 21:21:56 +00:00
Guy Harris 598e32f933 commview: use the data rate to determine the modulation.
The band field of the header doesn't necessarily indicate the modulation
of the packet; use the data rate to determine the modulation.
2021-03-10 11:09:57 -08:00
Dario Lombardo 686f141e2c tools: add more packages to brew script. 2021-03-10 16:28:16 +00:00
Jirka Novak 649eab2dfe RTP player: It is possible to select SETUP packet related to RTP stream
When SETUP (or related signalling packet) exists, it is selected by
Shift+G. If RTP stream is "alone", first RTP packet of the stream is
selected.
2021-03-10 15:45:12 +00:00
Guy Harris dcd3e26a81 several: make the phy reflect the packet modulation.
Use the data rate and channel to determine 11b vs. 11g vs. 11a for:

* Aruba Networks encapsulated remote mirroring;
* Prism headers;
* *Peek remote protocol;
* Network Instruments^W^WViavi Observer;
* *Peek classic format;
* Shomiti Surveyor.

Note why we *don't* need to do that for NetMon captures.
2021-03-10 09:45:26 +00:00
Patrick Große 7b48fb91a0 DECT: Register dissector correctly
Register the DECT dissector correctly using register_dissector so
it can be used as sub-dissector etc.
2021-03-10 09:23:44 +01:00
Guy Harris b185260efb prism: clean up some things.
"CCK" really means "DSSS", whether it uses CCK or not, i.e.  it includes
both the legacy 802.11 DSSS PHY (1 Mb/s and 2 MB/s) and the 802.11b
HR/DSSS PHY (5.5 Mb/s and 11 Mb/s).  Change the text and the name of a
variable to match.

For OFDM, put the modulation type after the rate, as is done for the
text for other modulations.  Put "Rate:" before the rate for all
modulations as well.
2021-03-09 19:02:53 -08:00
Guy Harris 71905c6597 radiotap: fix a comment.
Radiotap doesn't supply a channel number, just a center frequency, so
the latter is what we use to guess the modulation.
2021-03-09 18:25:26 -08:00
Gerald Combs 4b07a92103 Windows: Update our spandsp packages.
Use the versions of lrint and lrintf defined by Visual C++. This should fix

    91>C:\buildbot\builders\wireshark-master-64\wireshark-win64-libs\spandsp-0.0.6-win64ws\include\spandsp/fast_convert.h(320,5): error C2169: 'lrint': intrinsic function, cannot be defined (compiling source file C:\buildbot\builders\wireshark-master-64\windows-2019-x64\build\plugins\codecs\G726\G726decode.c) [C:\buildbot\builders\wireshark-master-64\windows-2019-x64\build\cmbuild\plugins\codecs\G726\g726.vcxproj]
    91>C:\buildbot\builders\wireshark-master-64\wireshark-win64-libs\spandsp-0.0.6-win64ws\include\spandsp/fast_convert.h(325,5): error C2169: 'lrintf': intrinsic function, cannot be defined (compiling source file C:\buildbot\builders\wireshark-master-64\windows-2019-x64\build\plugins\codecs\G726\G726decode.c) [C:\buildbot\builders\wireshark-master-64\windows-2019-x64\build\cmbuild\plugins\codecs\G726\g726.vcxproj]

for Visual C++ 16.9.1 and later.
2021-03-09 14:51:32 -08:00
Arkady Gilinsky 84e8b8b1f5 oampdu: Fix "Queue Configuration" message parsing
Signed-off-by: Arkady Gilinsky <8351139-ark-g@users.noreply.gitlab.com>
2021-03-09 19:58:35 +00:00
Arkady Gilinsky 1084e72f78 oampdu: Process DPoE GetRequest messages for Link and User Port objects
* Currently GetRequest messages processed only from ONU object itself
   and parsed incorrectly when such a messages originated for Link
   and User Port objects. This commit is fixing this parsing issue.

Signed-off-by: Arkady Gilinsky <8351139-ark-g@users.noreply.gitlab.com>
2021-03-09 19:58:35 +00:00
Martin Mathieson 2753c4c27e Expert info: check group and severity
Add a check for valid group and severity values, and fix violations foud.
2021-03-09 19:14:29 +00:00
Jirka Novak ce786ed265 Rtp player: It is possible to select multiple rows in stream's list and graph
Changes:
- It is possible to select multiple streams in list and in graph
- Select All/None/Invert implemented in list of streams and in graph
- Indication of "Selected" stream redesigned in graph
- Mouse hovering shows related row/wave
- All operations adapted to multiselection
2021-03-09 16:49:09 +00:00
Dr. Lars Völker 5d709459c4 TECMP: Adding missing reserved flag to timestamp (BUGFIX)
This patch fixes a bug in the current TECMP dissector that leads to
wrong timestamps, whenever the reserved flag is set to true.

Closes: #17279
2021-03-09 13:32:07 +00:00
Preston Hunt 1dd97bc1ff IEEE 802.11: add az LMR public action frame
Add dissection of Location Measurement Report public action frames.
2021-03-09 11:16:19 +00:00
Guy Harris 6e285df1c2 ppi: make the "phy" reflect the packet modulation.
Do more fixups of the "phy" based on the data rate, so that it reflects
the modulation used for the packet.

Note, in comments, why we're doing this, and that there's no reiable
way, in radiotap, to determine the type of channel on which capturing is
being done, as some packet providers use the channel field to indicate
the channel type and others use it to indicate the modulation.

Only provide the "short preamble" for "11b", as that's now being used to
mean "DSSS modulation" - packets on an 11g channel will be marked as
"11g" if they're OFDM or "11b" if they're DSSS.
2021-03-09 02:55:32 -08:00
John Thacker b3e55ba4b7 MP2T: Detect stuffing bytes after SECTs when PUSI is 0
When the payload_unit_start_indicator is 0, a continued section may be
followed by stuffing bytes. Detect the stuffing bytes based on the SECT
length and handle them in the MPEG2 TS dissector in that case, rather than
handing them to the SECT dissector (which assumes that the incoming tvb
contains only one section and no additional data), similar to how stuffing
bytes are already handled when the PUSI is 1.
2021-03-09 08:24:46 +00:00
Guy Harris 31dc280d25 radiotap, wlancap, wiretap: make the "phy" reflect the packet modulation.
Do more fixups of the "phy" based on the data rate, so that it reflects
the modulation used for the packet.

Note, in comments, why we're doing this, and that there's no reiable
way, in radiotap, to determine the type of channel on which capturing is
being done, as some packet providers use the channel field to indicate
the channel type and others use it to indicate the modulation.

Only provide the "short preamble" for "11b", as that's now being used to
mean "DSSS modulation" - packets on an 11g channel will be marked as
"11g" if they're OFDM or "11b" if they're DSSS.

Make some other cleanups while we're at it.
2021-03-08 18:40:32 -08:00
Gerald Combs d3f17ee08a Remove modelines in ui/qt.
Remove the editor modeline blocks from most of the source files in ui/qt
by running

    perl -i -p0e 's{ \n+ /[ *\n]+ editor \s+ modelines .* shiftwidth= .* \*/ \s+ } {\n}gsix' $( ag -g '\.(cpp|h)' )

then cleaning up the remaining files by hand.

This *shouldn't* affect anyone since

- All of the source files in ui/qt use 4 space indentation, which
  matches the default in our top-level .editorconfig

- The one notable editor that's likely to be used on these files and
  *doesn't* support EditorConfig (Qt Creator) defaults to 4 space
  indentation.
2021-03-08 18:11:32 +00:00
Anders Broman 1910e416a9 LTE-RRC: Rename some duplicated fields names. 2021-03-08 17:16:44 +00:00
Martin Boye Petersen fd9dcb592a GBCS: User interface alerts does not contain UI code
The user interface code is not part of user interface alerts,
so do not try to dissect it.
This makes the corresponding hf field and value string list unused, so remove those.
2021-03-08 15:40:31 +00:00
Anders Broman 4131019969 proto.c: Use global var insted of environment var
WIRESHARK_ABORT_ON_TOO_MANY_ITEMS
Closes #17275
2021-03-08 15:12:56 +00:00
Pascal Quantin 879a33f158 LTE RRC: add dissection of NAS 5GS PDUs
A ng-eNB connects to a 5GC, not an EPC, and thus transports 5GS NAS PDUs
2021-03-08 13:02:19 +01:00
Grzegorz Niemirowski 23052de590 ZVT: Added dissection of Refund and Reversal packets 2021-03-08 09:04:42 +01:00
João Valverde e240ec3d2d NetPerfMeter: Drop "protocol" from the name 2021-03-07 18:09:10 +00:00
Gerald Combs 095618ea87 [Automatic update for 2021-03-07]
Update manuf, services enterprise numbers, translations, and other items.
2021-03-07 09:49:41 +00:00
Chuck Craft cdf5f31454 cip: set hf_cip_cm_sc as generated field
Closes #17270
2021-03-06 15:17:23 +00:00
João Valverde 41a172cc95 if_capabilities: Use a structured error msg from dumpcap
Have dumpcap in child mode return an error message with a primary and
secondary string, instead of using stderr. When writing to the console
log we ignore the second message to prevent flooding the log with
tutorial-like info on permissions.
2021-03-06 12:56:11 +00:00
João Valverde b5530e7021 Teach our console log handler to use log domains (Unix)
By punting to the default log handler. tshark is using
g_log_default_handler(), Qt is too. Is there a reason
Wireshark cannot do the same?

Using g_defaut_log_handler() allows the user to
selectively turn on INFO and DEBUG messages using
the environment variable G_MESSAGES_DEBUG.

The fact that the output format is now consistent with
tshark is also a nice bonus.

Ping #17271.
2021-03-06 12:40:20 +00:00