Commit Graph

83238 Commits

Author SHA1 Message Date
Roman Volkov 4ce03e2be2 mpeg descriptor: add multilingual ones (5B,5C,5D,5E)
Add Multilingual Network Name Descriptor (0x5B),
Multilingual Bouquet Name Descriptor (0x5C),
Multilingual Service Name Descriptor (0x5D),
Multilingual Component Descriptor (0x5E).
2022-01-04 13:26:22 +00:00
Dr. Lars Völker 99056c2d9e Signal-PDU: Fix extraneous parentheses warnings 2022-01-04 13:28:55 +01:00
Roman Volkov 699dc583bd mpeg descriptor: add NorDig Logical Channel Descriptor v1 and v2
Add as a usual DVB descriptors. A specification was taken from
NorDig Unified Requirements 3.1.2.
Formally, private descriptors have to be used after Private Data
Specifier (0x5F) but DVB operators often ignore this rule. So I
didn't limit the descriptors parsing by Nordig private data
specifier (0x00000029).
2022-01-04 11:53:19 +00:00
Martin Mathieson 10ffdcb3c0 Some (trivial) cppcheck fixes. 2022-01-04 10:48:22 +00:00
Dr. Lars Völker b7ae71a9c2 Signal-PDU: Adding support for float, string, uint_string
This patch adds support to the Signal-PDU dissector for the following
data types:
- float: 32 and 64 bit IEEE floating point numbers
- string: fixed length ASCII strings
- uint_string: dynamic length ASCII strings with leading length
2022-01-04 08:16:18 +00:00
Роман Донченко 3efc8eb073 ldap, ros: restore a missing word in a comment
This was accidentally introduced in 69d54d6f. The corresponding
generated source files don't have this problem, so they don't need to
be fixed.
2022-01-04 07:13:45 +00:00
Jaap Keuter a4cbf047e4 Validate only real C files, not templates 2022-01-04 07:09:26 +00:00
Gerald Combs fc2217aa39 WSDG: Add a warning about private forks.
It's not obvious that making a GitLab fork private will disassociate it
from the upstream repository, and it seems to have tripped up a couple
of people. Add a warning to the "Creating Merge Requests" section.
2022-01-04 06:41:05 +00:00
Anders Broman 95e28f7631 GTPv2: Handle thcase where dissect_diameter_3gpp_uli has no data. 2022-01-04 06:24:48 +00:00
John Thacker 04974e3ca9 text2pcap test: Use the -a flag
The text2pcap tests that use a capinfos->tshark->text2pcap->capinfos
cycle need to use the -a flag for identifying when the start of the
ASCII dump looks like hex, since the tshark -x output is a hex+ASCII
format. Adding the flag means that we can remove the override of the
expected data size for the dns_icmp.pcapng.gz file. (It also affects
the file with multiple data sources, but another issue remains there.)
2022-01-03 18:31:12 -05:00
Guy Harris 0e98eb412f nstime: "localtime()" is an API, "local time" is local time. 2022-01-03 23:08:07 +00:00
John Thacker 2aa0664e25 text2pcap: Use -F flag for tests
Use the -F file type flag to have the text2pcap tests produce the
same file type as the input flag, which is a little superior when
the input flag is a nanosecond pcap.

Note that commit 5076aee044 means that
capinfos -M provides a machine-readable filetype that's easier to put
back into text2pcap.
2022-01-03 22:53:49 +00:00
John Thacker da6cfc4de2 text_import: nanosecond resolution by default
Use nanosecond resolution pcapng files for "Import from Hex Dump"
by default (since we support that level of precision and that's
what text2pcap does).
2022-01-03 22:38:31 +00:00
Gerald Combs d0408b8b78 epan: Add p_set_proto_data.
Add p_set_proto_data, which either updates our entry if we have a
proto+key match or adds an entry if we don't. Use it with
p_set_proto_depth. Document it and our other proto_data routines.
2022-01-03 22:19:14 +00:00
Dr. Lars Völker f02d2a4793 Signal-PDU: Adding Check to Remove Compiler Warning
There was a warning that dynamic_hf[i].p_id is not checked for NULL and
that could mean a NULL Pointer dereference.

To make the code more robust and the compiler happy, this patch adds the
check for NULL.
2022-01-03 22:04:14 +00:00
Dr. Lars Völker 196e8e74f3 DLT: Call subdissectors even with empty payload 2022-01-03 21:45:52 +00:00
Martin Mathieson 070cc0a47a Run dissector URLs check - fix up a couple of entries. 2022-01-03 20:01:27 +00:00
Pascal Quantin d2b5441cec F1AP: upgrade dissector to v16.8.0 2022-01-03 19:22:24 +00:00
Gerald Combs 6d319297ae Qt: Add a common hover color. 2022-01-03 19:03:46 +00:00
Pascal Quantin ce43234c5a E1AP: upgrade dissector to v16.8.0 2022-01-03 18:48:52 +00:00
Pascal Quantin c50512abc3 NRPPa: upgrade dissector to v16.6.0 2022-01-03 18:15:52 +00:00
Martin Mathieson 29190ed12e RTPS: Make some functions static 2022-01-03 18:15:11 +00:00
Pascal Quantin 4942262c18 XnAP: upgrade dissector to v16.8.0 2022-01-03 17:37:13 +00:00
Pascal Quantin 345326697c NGAP: upgrade dissector to v16.8.0 2022-01-03 17:21:26 +00:00
Pascal Quantin 7f9b4292c1 NR RRC: upgrade dissector to v16.7.0 2022-01-03 16:58:20 +00:00
John Thacker 21465962fd text2pcap: Use common capture type flag
Support all possible file formats that wiretap writes, using the
same "-F" flag that other CLI tools like editcap, mergecap, and tshark
support. Default is still pcap for now; a future commit will switch
to pcapng and remove the "-n" option, to match other CLI tools.
2022-01-03 16:42:15 +00:00
João Valverde 8501dc48dd dfilter: Accept byte arrays without separators
This relaxes the display filter syntax to accept byte arrays without
separators. An expression such as the following becomes valid:

    quic.dcid == b1f0b7cbe0897974

Previously it had to be written as:

    quic.dcid == b1:f0:b7:cb:e0:89:79:74

Partially fixes #17818.
2022-01-03 16:27:16 +00:00
João Valverde 119473eab3 CMake: Use more consistent naming for options
Having some options use DISABLE_ and others ENABLE_ is inconsistent
and difficult to remember. Use ENABLE_ instead consistently.

Frame-larger-than remains an exception.
2022-01-03 15:55:06 +00:00
Pascal Quantin 60dd63892a X2AP: upgrade dissector to v16.8.0 2022-01-03 15:39:36 +00:00
Pascal Quantin cc725c0f93 S1AP: upgrade dissector to v16.8.0 2022-01-03 15:22:31 +00:00
Pascal Quantin c243f7b4c8 LPP: upgrade dissector to v16.7.0 2022-01-03 14:32:06 +00:00
Pascal Quantin d6a9d00cd5 LTE RRC: upgrade dissector to v16.7.0 2022-01-03 14:01:27 +00:00
ismaelrti d4c9dbd2b7 RTPS: Added compressed samples dissection feature.
- Added dissection of encapsulation options.
- Samples compressed with ZLIB can be uncompressed and dissected.
2022-01-03 13:45:12 +00:00
Dr. Lars Völker df2fef33f6 Signal-PDU: Adding support to dissect DLT payloads
This patch adds support to DLT for subdissectors and allows the Signal
PDU dissector to attach to DLT to parse non-verbose payloads.
2022-01-03 13:29:13 +00:00
Dr. Lars Völker ea628979b9 Signal-Pdu: Fix possible memory leak
This should remove a clang warning.
2022-01-03 14:07:41 +01:00
Dr. Lars Völker eeb45372fa UAT: Fix Wireshark crash on missing UAT columns
Wireshark crashes when missing an UAT column due to a read access
violation. This was introduced by the code to add better compatibility
to UAT changes.

See "UAT: Allow missing fields."

This codes add a check, if the defaults are NULL before accessing them.
2022-01-03 08:45:17 +00:00
Roman Volkov 1f73e8e6a1 mpeg descriptor: update Registration Descriptor (0x05)
The descriptor contains a registered MPEG TS Identifier. Which full des-
cription may be found at https://smpte-ra.org/registered-mpeg-ts-ids.
I added displaying of a readable MPEG TS identifier and an organization
name.
2022-01-03 08:29:20 +00:00
Dr. Lars Völker bfffc8d490 Signal-Pdu/AUTOSAR I-PduM: CAN-IDs registered as std/ext (bugfix)
Instead of just assuming CAN-IDs > 0x7ff are extended, the new code
checks the EFF_FLAG of the CAN-ID of the Signal_PDU_Binding_CAN and
AUTOSAR_IPDUM_Binding_CAN. This affects registering CAN-IDs with the CAN
dissector as well as config lookups.

This patch changes the config format of Signal_PDU_Binding_CAN and
AUTOSAR_IPDUM_Binding_CAN. CAN-IDs need to include the EFF-Flag now!
2022-01-03 08:14:10 +00:00
Dr. Lars Völker 19ed057563 BLF: Adding support to read interface names
This patch reads out the interface of the meta data in BLF to set the
interface names in Wireshark to these values.
2022-01-03 07:58:47 +00:00
Gerald Combs c6f328c6a9 Qt: Disable alternating table rows.
Disable QAbstractItemView's alternatingRowColors in places where we have
that set. One of Wireshark's most heavily used features is packet
colorization; we use color in packet list and detail rows to convey
information. Simple alternating color rows doesn't do that, and as my
blatant appeal to authority^W^W^W^W^WEdward Tufte points out, "Strips
are merely bureaucratic or designer chartjunk; good typography can
always organize a table, no stripes needed."

https://www.edwardtufte.com/bboard/q-and-a-fetch-msg?msg_id=0001IV
2022-01-02 14:41:53 -08:00
Gerald Combs 17e4032e81 [Automatic update for 2022-01-02]
Update manuf, services enterprise numbers, translations, and other items.
2022-01-02 16:39:07 +00:00
Samuel D. Leslie 40256c64e0 Add support for some additional Cisco IKEv2 VIDs
- CISCO-DYNAMIC-ROUTE
  Indicates support for IKEv2 Dynamic Routing
- CISCO-VPN-REV-02
  Not so sure about this one. Presumably indicates to peers internal
  differences in the IKE implementation which can influence subsequent
  configuration of the security associations.
2022-01-02 15:24:36 +00:00
João Valverde dd9ac15ff2 dfilter: Require separators with ISO 8601 time
Require date/time separators when entering a time value, e,g:
    2014-07-04 12:34:56.789+00:00

Separators in the timezone offset are an exception, they are
never mandatory.

This excludes ISO basic format to avoid inputs that could
be entirely numbers indistinguishable from Epoch time, in case
we want to support that in the future.
2022-01-02 10:44:01 +00:00
John Thacker ab347ea14e text2pcap: add regex
Add support in text2pcap for the regex mode added to "Import from
Hex Dump" in 3.6.0 The input and output indicators cannot (yet?)
be configured, and are set to the default of allowing any of "iI<"
for inbound and "oO>" for outbound. This reaches feature parity
between text2pcap and Import from Hex Dump, fixes #16724.
(There might be some more cleanups to do, including docs.)
2022-01-02 01:01:51 +00:00
Gerald Combs 6cdb86fbc7 Tools: Be more clear that we're matching the BSD 1-Clause license. 2022-01-01 15:25:21 -08:00
Roman Volkov b1bf0db069 mpeg table: add IDs for EIT schedule tables (0x50 - 0x6F) 2022-01-02 00:40:07 +02:00
João Valverde 12d39efdca Revert "epan: Initialize wiretap"
This reverts commit c15f2aadc1.

Crashes on exit. Needs more work.

Fixes #17821.
2022-01-01 16:23:04 +00:00
Roman Volkov 5ce73acf45 mpeg descriptor: update 0x50 to DVB BlueBook A038r14 2022-01-01 15:18:54 +00:00
Roman Volkov ee92914e10 mpeg descriptor: update 0x48 to DVB BlueBook A038r14 2022-01-01 15:18:54 +00:00
easonweii b90b4e5336 ISUP/BICC: Fixes parsing issues in some protocols.
Protocol parses some fields. As a result, the parsed result is inconsistent with the description in the protocol.
Register different fields in the BICC protocol and parse them separately.
The details are as follows:
1. Split the following fields in the ISUP protocol:
Continuity Indicator(isup.continuity_check_indicator)
End-to-end method indicator(isup.forw_call_end_to_end_method_indicator)
End-to-end method indicator(isup.backw_call_end_to_end_method_indicator)
End-to-end information indicator(isup.backw_call_end_to_end_information_indicator)
BICC indicator(isup.backw_call_isdn_user_part_indicator)
SCCP method indicator(isup.backw_call_sccp_method_indicator)
End-to-end information indicator(isup.forw_call_end_to_end_information_indicator)
BICC indicator(isup.forw_call_isdn_user_part_indicator)
BICC preference indicator(isup.forw_call_preferences_indicator)
SCCP method indicator(isup.forw_call_sccp_method_indicator)
2. Register the following fields in the BICC protocol again.
Continuity Check Indicator(bicc.continuity_check_indicator)
End-to-end method indicator(bicc.forw_call_end_to_end_method_indicator)
End-to-end method indicator(bicc.backw_call_end_to_end_method_indicator)
End-to-end information indicator(bicc.backw_call_end_to_end_information_indicator)
ISDN user part indicator(bicc.backw_call_isdn_user_part_indicator)
SCCP method indicator(bicc.backw_call_sccp_method_indicator)
End-to-end information indicator(bicc.forw_call_end_to_end_information_indicator)
ISDN user part indicator(bicc.forw_call_isdn_user_part_indicator)
ISDN user part preference indicator(bicc.forw_call_preferences_indicator)
SCCP method indicator(bicc.forw_call_sccp_method_indicator)
2022-01-01 14:06:21 +00:00