Commit Graph

37989 Commits

Author SHA1 Message Date
ismaelrti 858f759fa2 RTPS: Improving the way the Domain ID is dissected
Taking the domain id from discovery traffic if available or showing
amessage that the value might not be accurate if not.
2023-01-31 16:14:01 +00:00
ismaelrti 1c9b202f5f RTPS: Fix incorrect DomainId when port is not default.
Trying to deduce the DomainIf from the port is not correct when the port
is not default. Using discovery data instead if available.
2023-01-31 16:14:01 +00:00
Cody Planteen 9e7c15fcb5 VRT: add decoding of more CIF1 fields to VITA 49 dissector 2023-01-31 12:50:36 +00:00
John Thacker 25544e4d4f TLS: Add to HTTP upgrade subdissector table
RFC 2817. Ping #18825
2023-01-31 01:52:09 +00:00
Brendan Meath 4d92967b74 Fix order of CAG only flag descriptions. 2023-01-30 18:05:14 +00:00
Holger Jeromin 910a21a57a fix mimimum typo in comment
Came from https://datatracker.ietf.org/doc/html/draft-ietf-6man-mtu-option-02 but RFC 9268 is fixed, too.
2023-01-30 15:06:00 +00:00
Mathis Marion 3ff9f075c6 Update ICMPv6 dissector with ND EARO status
See https://www.rfc-editor.org/rfc/rfc8505#section-4.1 Table 1
2023-01-30 13:28:52 +00:00
Mathis Marion 7908dfd930 Update ICMPv6 dissector for ND EARO
RFC 8505 introduces the Extended Address Registration Option (EARO)
which uses some previously reserved fields from the Neighbor Discovery
Address Registration Option (ARO) defined in RFC 6775.

https://www.rfc-editor.org/rfc/rfc8505#section-4.1
https://www.rfc-editor.org/rfc/rfc6775#section-4.1
2023-01-30 13:28:52 +00:00
Martin Mathieson aa31a1b405 GREBonding: fix type in vals for link type 2023-01-30 13:11:15 +00:00
Martin Mathieson efe35a4ccc Fix or suppress more warnings from check_typed_item_calls 2023-01-30 10:28:24 +00:00
Jim Walker d085725bb6 Couchbase: update snapshot flags for change streams
Two new flags maybe generated by couchbase DCP

* history 0x10
* may contain duplicates 0x20

Change-Id: Ic8c377fd1a5e7dc65453a779a1a36a94283a64ed
2023-01-30 08:24:17 +00:00
Martin Mathieson 1de8882cc3 Fix some too-short item lengths 2023-01-29 20:43:00 +00:00
Gerald Combs 620dc806db [Automatic update for 2023-01-29]
Update manuf, services enterprise numbers, translations, and other items.

services failed.
2023-01-29 18:53:10 +00:00
Martin Mathieson 407b707e1f check_typed_item_calls: filter out some false positives 2023-01-29 18:39:20 +00:00
Alexis La Goutte ac64be57c0 MONGO: add BSON Element Decimal128
Close: 18791
2023-01-28 21:12:45 +00:00
Tomasz Moń 5e3d77761b
USBLL: Do not reassemble across reset boundary
Invalidate endpoint info on SET ADDRESS to prevent reassembly and/or
retransmission detection across reset boundary.

Leave endpoint info intact when assigning default address (0) to avoid
issues related to unknown control endpoint max packet size. Only control
transfers are allowed to address 0 so this should pose no issues.
2023-01-28 10:54:40 +01:00
David Fort bb8d183387 rdp_egfx: improve command parsing and packet browsing 2023-01-27 23:18:23 +01:00
Jorge Mora dbf5bf27d3 NFS: add NFSv4.1 CB_RECALL_ANY operation
Add support for CB_RECALL_ANY operation as given in the following:
RFC 5661 Network File System (NFS) Version 4 Minor Version 1 Protocol.
RFC 8435 Parallel NFS (pNFS) Flexible File Layout.

    Opcode: CB_RECALL_ANY (8)
        Objects to keep: 0
        Number of masks: 1
        Type mask: 0x00000001 (Read Delegation)
            Type: Read Delegation (0)
2023-01-27 11:17:15 -07:00
Ryan Doyle 48fa729a9c HTTP2: Track the frame the request/response is contained in
Similar to the HTTP dissector, link between the frames that contain the request
and response.
2023-01-26 19:37:34 +00:00
David Perry db010b5a27 Exported PDU dissector improvements 2023-01-26 18:02:23 +00:00
Martin Gallo ef2ea2acdd saprouter/saphdb: Fixing warnings due to multiple hf types
Fixed feedback from !9581
2023-01-26 09:12:53 +00:00
Samuel Wein 260f835eef Added Deutsche Telekom specific GREBonding dissection 2023-01-25 19:59:06 +00:00
Martin Gallo 48737e2983 SAPDIAG: Added SAP Diag as main dissector
Added the SAP Diag dissector protocol from [SecureAuth's plugin](https://github.com/SecureAuthCorp/SAP-Dissection-plug-in-for-Wireshark/blob/master/src/packet-sapdiag.c).

This is a dissector that implements the Diag protocol. Decompression of packets is not considered as this requires the proprietary LZC/LZH decompression routines still pending to be added in #8973. The Diag packets can be wrapped in an SNC frame, in which case the respective dissector is called. Embedded RFC calls are disabled as this requires the respective dissector to be found, which will be submitted in a separate merge request.

Details about the protocol and example requests can be found in [pysap's documentation](https://pysap.readthedocs.io/en/latest/protocols/SAPDiag.html).
2023-01-25 17:06:27 +00:00
Martin Mathieson b1b180fd9e Fix some spelling errors. 2023-01-25 10:52:18 +00:00
Martin Gallo 13b6063d27 SAPRouter: Adding found passwords to the credentials tap
Adding info and route string passwords to the 'credentials' tap to find them easily.
2023-01-25 09:07:44 +00:00
Daniël van Eeden f0a066dd0d MySQL: Try to handle converstations w/o caps
If the server greeting and login packets weren't part of the captured packets we assume various capabilities were not set. This MR tries to make a better guess in those cases to allow dissection to work in most cases.
2023-01-25 06:57:27 +00:00
Mokhtar Ben Messaoud 9c3ce8e371 ieee1905: Update Profile-2 AP Capability TLV
update r2_ap_capa_flags (epan/dissectors/packet-ieee1905.c):
    - rename
        - hf_ieee1905_basic_service_prio_flag ==>
                    hf_ieee1905_ctag_service_prio_flag
        - hf_ieee1905_enhanced_service_prio_flag ==>
                        hf_ieee1905_dpp_onboarding_flag
    - add new flag hf_ieee1905_traffic_separation_flag:0x08
        used by r2_ap_capa_flags
    - update hf_ieee1905_r2_ap_capa_flags_reserved:0x07

as defined by Wi-Fi EasyMesh™ Specification Version 5.0 :
                17.2.48 Profile-2 AP Capability TLV format
2023-01-25 06:12:43 +00:00
Daniël van Eeden 0ba90d1249 MySQL: Reduce noise related to length encoded ints
Length encoded integers were:
- Reported as `mariadb.prefix` and `mariadb.length` but were not specific to MariaDB specific protocol features.
- These were reported in the UI as "Length" and "Prefix" and were in many cases the same as 1 byte integers are very common.
- These were often duplicating things like `hf_mysql_connattrs_length`, `hf_mysql_connattrs_name_length`, etc which meant that the same length was often reported 3 times in the interface.
2023-01-24 17:43:06 +00:00
Dr. Lars Völker 2d2528cc2f UDS: Support OBD Services in UDS Service Error
Since OBD uses the UDS Service Error, it needs to resolve the OBD
Service IDs too.
2023-01-24 14:16:07 +00:00
Dr. Lars Völker cf3d5fad5a UDS: Fix Typo in Error Service
The response code is short NRC, while SID is the Service ID.
2023-01-24 13:11:35 +00:00
Daniël van Eeden 8ec198c272 MySQL: Decode caching_sha2_password packets 2023-01-24 09:51:12 +00:00
Chuck Craft 06fc6483b3 twamp: test mbz fields are FT_UINT16 2023-01-23 20:16:54 -06:00
Daniël van Eeden 2691f87ef9 MySQL: Fix warning about incomplete dissector 2023-01-23 19:19:11 +00:00
Martin Mathieson 0d8f9f908a ORAN FH CUS: Update some vals[], and add subtree for bfwCompHdr 2023-01-23 15:09:58 +00:00
Alexis La Goutte 4d5a6e5c4a SMB2: Fix typo
Lock Sequence Number => Lock Sequence Index
2023-01-23 13:31:16 +00:00
Mokhtar Ben Messaoud 0b47fde866 WPS: Multi-AP Extension subelement: Profile 1/2 Backhaul STA assoc disallowed
Parse Multi-AP Extension subelement flags:
	- Profile-1 Backhaul STA association disallowed.
	- Profile-2 Backhaul STA association disallowed.
defined by Wi-Fi_EasyMesh_Specification_v5.0.pdf / Table 14
2023-01-23 11:28:54 +00:00
Martin Mathieson 7199a04c4c BTLE: Fix a copy/paste error in control_opcode_vals 2023-01-23 10:32:52 +00:00
Gerald Combs 6787835373 [Automatic update for 2023-01-22]
Update manuf, services enterprise numbers, translations, and other items.
2023-01-23 00:27:45 +00:00
Alexis La Goutte 3c97c2f226 BGP: Fix check warning
packet-bgp.c hf_bgp_ls_tlv_te_default_metric_value : - filter 'bgp.ls.tlv.te_default_metric_value' appears consecutively - labels are 'TE Default Metric (old format)' and 'TE Default Metric'
packet-bgp.c:4026 proto_tree_add_item called for hf_bgp_mcast_vpn_nlri_source_as  -  item type is FT_UINT16 but call has len 4
packet-bgp.c:4095 proto_tree_add_item called for hf_bgp_mcast_vpn_nlri_source_as  -  item type is FT_UINT16 but call has len 4
2023-01-21 14:57:33 +00:00
Joakim Karlsson dee461254b GTPv2: Track Session during Inter RAT Mobility signaling 2023-01-21 14:33:04 +00:00
Dylan Ulis 39d9c77109 ENIP: CPF format only applies to List responses 2023-01-21 13:34:09 +00:00
Martin Mathieson c84a54c82f Checked encoded values for proto_tree_add_item() 2023-01-21 11:16:20 +00:00
Alexis La Goutte 2bde511bb5 SMB2: Add (Request) Lock Sequence Number/Index
Close 18810
2023-01-21 01:01:46 +00:00
hidd3ncod3s f268ef2f17 Support for TDS SSPI Token parsing. 2023-01-20 15:01:36 +00:00
Martin Mathieson be51acfffb Fix some issues seen by tools/check_typed_item_calls.py 2023-01-20 12:47:59 +00:00
PMcL d45a733258 mako: Updated Metamako trailer dissection
Minor updates to some variable names and wording of fields.
2023-01-20 09:27:01 +00:00
Alexis La Goutte 8080189ff3 h261: remove if(tree) check
not longer needed
2023-01-20 07:36:05 +00:00
Alexis La Goutte d4932b3313 h261: Remove extra space 2023-01-20 07:36:05 +00:00
Alexis La Goutte 1844094e07 H261: Fix encoding of H261 vmvd
Close #18812
2023-01-20 07:36:05 +00:00
John Thacker c380f516a2 GTP, GTPv2: Add request/response framenum types
Add the appropriate FT_FRAMENUM string types to the request
and response fields for GTP and GTPv2, so that arrows are
drawn for the related packet symbols.
2023-01-20 00:51:19 +00:00