Commit Graph

58685 Commits

Author SHA1 Message Date
Michael Mann da09a1bfd8 Take all epan_column_info members that always get allocated to "number of columns" to share their own data structure.
Change-Id: Ib982662db6cf68730a7d121eac60d9bc5ae67429
Reviewed-on: https://code.wireshark.org/review/9195
Petri-Dish: Michael Mann <mmann78@netscape.net>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
Reviewed-by: Michael Mann <mmann78@netscape.net>
2015-06-29 02:11:04 +00:00
Guy Harris b9145bc836 "Short preamble" is 802.11[bg]-only, so put it in the PHY-specifc info.
We're already only setting it for 11b and 11g; this makes it a bit
cleaner, e.g. we don't need to say "oh, wait, we *don't* have short
preamble" for 11n and 11ac.

Change-Id: Idcf3e8c93d6a417f0319e4bd33247b98f07b6052
Reviewed-on: https://code.wireshark.org/review/9209
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2015-06-28 19:44:07 +00:00
Guy Harris 8aaf42d2b1 If we don't know whether STBC is being used, we don't know NSTS.
If we don't know whether space-time block coding is being used, we don't
know the number of space-time streams, so don't try to calculate it and
don't put it into the protocol tree.

Mark it as generated, while we're at it, as it's not a value from the
radiotap header, and make it a guint.

Change-Id: Ib0b14f2f4f94e042d034311e10bb96b9b29a9d3e
Reviewed-on: https://code.wireshark.org/review/9206
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2015-06-28 17:29:42 +00:00
Guy Harris 2762995316 If we don't know whether STBC is being used, we don't know NSTS.
If we don't know whether space-time block coding is being used, we don't
know the number of space-time streams, so don't try to calculate it and
don't put it into the protocol tree.

Change-Id: I7ffd1b0e79e45fee526305846aadca04eb135b11
Reviewed-on: https://code.wireshark.org/review/9205
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2015-06-28 16:51:52 +00:00
Guy Harris ad18161c79 The two bits of NESS are numbers, not Booleans.
Found by Pascal Quantin.

Change-Id: I843db0c1d28bcd4714799285da5e1ea8a81307a1
Reviewed-on: https://code.wireshark.org/review/9204
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2015-06-28 16:35:10 +00:00
Guy Harris 7d7f6be1fc We only have the short preamble flag if we have a Flags field.
Don't set PHDR_802_11_HAS_SHORT_PREAMBLE or phdr.short_preamble unless
we have the flags bits from the Flags field.

Discovered by Pascal Quantin by running valgrind on the capture from bug
11317.

Change-Id: I7e91dea116f6cc977101b7b5e76067021f68a0bf
Reviewed-on: https://code.wireshark.org/review/9203
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2015-06-28 16:23:30 +00:00
Gerald Combs b09891df95 [Automatic update for 2015-06-28]
Update manuf, services enterprise-numbers, translations, and other items.

Change-Id: Idf976da88eab4126089b612084ce9d4a4643d80c
Reviewed-on: https://code.wireshark.org/review/9201
Reviewed-by: Gerald Combs <gerald@wireshark.org>
2015-06-28 15:08:30 +00:00
Graham Bloice e4dc3321b1 Set 802.11.ac Partial AID field size
The assignment of a short to a guint8 in packet-ieee80211-radiotap.c line 1696
generates a narrowing warning.

In my reading of the spec which shows the field as 9 bits,
and looking at the hf fields for this item I think it should be a guint16.

Change-Id: Ic7785c2bfc66d72f7b1e914b1a46f32079fc99d9
Reviewed-on: https://code.wireshark.org/review/9197
Reviewed-by: Graham Bloice <graham.bloice@trihedral.com>
Petri-Dish: Graham Bloice <graham.bloice@trihedral.com>
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
2015-06-28 12:20:54 +00:00
Joerg Mayer d4bdbb971e 1.5.17 seems to be a typo. Change it to the probably intended 1.6.17
Change-Id: I43fc4962e1fdc9fb264b313afd3f5612de42116a
Reviewed-on: https://code.wireshark.org/review/9196
Reviewed-by: Jörg Mayer <jmayer@loplof.de>
2015-06-28 10:53:55 +00:00
Martin Mathieson 95dbae45bd ISAKMP: consistently use two-space indentation (as per modelines). Also added one missing break
Change-Id: I26f03b56765ffd69dab53988c8e35c7cf3f99f16
Reviewed-on: https://code.wireshark.org/review/9193
Petri-Dish: Martin Mathieson <martin.r.mathieson@googlemail.com>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2015-06-28 08:02:12 +00:00
Guy Harris 80efc53b05 Quick and dirty overflow checking.
We really need a better way to handle packet offset overflows.

Change-Id: I6e476f7bc6ddac2c5515c4e09192d88f528ea091
Reviewed-on: https://code.wireshark.org/review/9194
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2015-06-27 22:30:12 +00:00
Martin Mathieson 74a5f50c80 ipsec: correct some format specifiers
Change-Id: I340ab6186d5d5d9c5d0fa301a1b1e5824932d547
Reviewed-on: https://code.wireshark.org/review/9192
Petri-Dish: Martin Mathieson <martin.r.mathieson@googlemail.com>
Reviewed-by: Martin Mathieson <martin.r.mathieson@googlemail.com>
2015-06-27 22:20:16 +00:00
Evan Huus 40f330f28c Free a malloc'ed error message to not leak memory
Change-Id: I59b43e8d4efe8320cf17c6dd086440d3522ef247
Reviewed-on: https://code.wireshark.org/review/9183
Reviewed-by: Martin Kaiser <wireshark@kaiser.cx>
2015-06-27 16:26:04 +00:00
Martin Kaiser 48f7ce79e2 checkAPIs.pl: check how ui class files are included
flag up a warning if a ui class file is included from the current
directory by using #include ""

Visual Studio needs #include <> to make sure that we always pick up
these files from the build directory if we're building with CMake

combine this check with the other check for gcrypt.h so that included
files are checked in one common subroutine

Change-Id: If8420ff5886f8eb2a71aa8fbfe6bc5d2bda607ce
Reviewed-on: https://code.wireshark.org/review/9189
Petri-Dish: Anders Broman <a.broman58@gmail.com>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2015-06-27 16:25:41 +00:00
Evan Huus 13df6e9d9d bacapp: cleanup and remove some add_text
Change-Id: I991269db9c2705a4ac41a576000a612aa6de2242
Reviewed-on: https://code.wireshark.org/review/9186
Reviewed-by: Evan Huus <eapache@gmail.com>
Petri-Dish: Evan Huus <eapache@gmail.com>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2015-06-27 14:35:16 +00:00
Martin Mathieson b24a45c354 Avoid some Visual Studio Code Anaylzer warnings
Change-Id: I320386b02bea09658636a9281ee3cbba34a5e4cd
Reviewed-on: https://code.wireshark.org/review/9188
Petri-Dish: Martin Mathieson <martin.r.mathieson@googlemail.com>
Reviewed-by: Martin Kaiser <wireshark@kaiser.cx>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2015-06-27 14:32:35 +00:00
Guy Harris 26a1ccbc05 Handle the VHT flavor of the HT Control field.
The low-order bit of the field indicates whether it's the HT or VHT
version.

Show subfields as part of a 32-bit bitfield; few subfields begin and end
on a byte boundary (the Link Adaptation Control field no longer does so;
its low-order reserved bit became the VHT flag).

Update references to the 11n spec.

Update a comment.

Change-Id: I9fcb99a5517afb319b67d4deb2355c7cb0be73b6
Reviewed-on: https://code.wireshark.org/review/9191
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2015-06-27 07:42:05 +00:00
Martin Kaiser f196061889 (trivial) daap: remove if(tree) and return; at the end of a function
Change-Id: I969efbaeda75d2790165a6cbc214f58f1bd0ba7f
Reviewed-on: https://code.wireshark.org/review/9190
Reviewed-by: Martin Kaiser <wireshark@kaiser.cx>
2015-06-27 05:46:51 +00:00
Guy Harris ac9f64a9e1 Handle a "should not happen" case, to squelch compiler warnings.
Change-Id: Icb3497924c88963688d60a59c5873a271b7e4d21
Reviewed-on: https://code.wireshark.org/review/9187
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2015-06-27 04:49:00 +00:00
Guy Harris b401fb0380 Use the PHY type in the radio information to recognize HT packets.
Rather than having a separate "802.11 HT" dissector, just look for the
802.11n (HT) PHY.

(As a side-effect, This also causes PPI HT frames to have the radio
information dissected by the wlan_radio dissector, as is the case with
other 802.11 frames accompanied by radio information.)

Change-Id: I854c42e19481a17767e64a3b92222b09dbaa02dd
Reviewed-on: https://code.wireshark.org/review/9185
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2015-06-27 02:25:37 +00:00
Pascal Quantin d6e53793ad RTP: create conversation when using heuristic dissector
This gives a chance to perform RTP reassembly when "Try to decode RTP outside of conversations"
option is activated.

Bug: 11310
Change-Id: Ic8bd9532a88a072c3cb1f1907cf7117b5072a954
Reviewed-on: https://code.wireshark.org/review/9175
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2015-06-26 21:57:45 +00:00
Guy Harris 5c438e1e05 Those aren't booleans, they're counts of streams.
Change-Id: Id0520da614f239d3146f5c03ef1a930e8a0fcd94
Reviewed-on: https://code.wireshark.org/review/9184
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2015-06-26 21:27:53 +00:00
Evan Huus 4ee22e88cd Update valgrind script for the UI
Plain 'wireshark' is now the Qt version, and 'wireshark-gtk' is the GTK version.

Change-Id: I893d6ae9a205998e191cbf6160cf27fcfd09bb4d
Reviewed-on: https://code.wireshark.org/review/9181
Reviewed-by: Evan Huus <eapache@gmail.com>
2015-06-26 21:17:39 +00:00
Guy Harris b2a6dff815 Clean up switch statement whitespace.
(Try to keep the same indentation style within a single switch
statement, at least.)

Change-Id: I5b349fd90881d1a1d2be377a291bfceda56476aa
Reviewed-on: https://code.wireshark.org/review/9180
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2015-06-26 20:13:01 +00:00
Guy Harris 0f42ed0522 Squelch a compiler warning.
It's a bogus warning, but not all compilers do enough dataflow analysis
to figure that out.

Change-Id: Iebc1fffab87e83b16210003b60aae2333e0b5ec9
Reviewed-on: https://code.wireshark.org/review/9179
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2015-06-26 19:32:17 +00:00
Guy Harris 5e6be95359 Use "Present"/"Absent" for VHT presence flags.
Change-Id: I1571cf52d240c5d32dd8db0af2f18b91cc6e6d34
Reviewed-on: https://code.wireshark.org/review/9178
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2015-06-26 19:03:22 +00:00
Evan Huus b855a9fa4d wmem: permit lookups in NULL trees (oops)
Change-Id: I222b95b48b7ac8debbd717b32dd471742222c16b
Reviewed-on: https://code.wireshark.org/review/9177
Reviewed-by: Evan Huus <eapache@gmail.com>
2015-06-26 18:40:46 +00:00
Pascal Quantin 0953c36ec9 Qt: tweaks to Capture Interfaces dialog
- Add option to stop capture after X files are created
- Increase the max value for number of packets / files / bytes / seconds from 1000 to INT_MAX
- Fix capture name file selection

Change-Id: I9fb8eeaa925e5bd5380bb654686575f41126546a
Reviewed-on: https://code.wireshark.org/review/9162
Petri-Dish: Pascal Quantin <pascal.quantin@gmail.com>
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
2015-06-26 18:37:35 +00:00
Evan Huus 66c738817c wmem: convert string trees to single-layer
The whole radix tree thing is kind of neat (and may even be more performant for
short strings?) but it's really confusing to reason about and is terribly
inefficient for long strings.

Ping-Bug: 9078
Change-Id: I1bd333918a6e557801e82f4553d386120138065e
Reviewed-on: https://code.wireshark.org/review/9165
Reviewed-by: Evan Huus <eapache@gmail.com>
2015-06-26 18:35:47 +00:00
Guy Harris 78adf17850 Fix handling of 11ac radio metadata.
Add more fields to the metadata to handle everything radiotap has, and
show them.

Call the FEC type field just "FEC", and have it be an integer field with
0 meaning BCC and 1 meaning LDPC, rather than a Boolean.

11ac doesn't have *an* MCS, it can have up to 4, one per user.

Label the 11ac bandwidth values the same way we do in the radiotap
dissector.

Change-Id: I2c2415baff3e5d68d49dda497980e8271d26b1f6
Reviewed-on: https://code.wireshark.org/review/9176
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2015-06-26 18:29:08 +00:00
Michal Pazdera 51d2eefc95 Added option in h245 preferences to print h245 messages content
into Information column in typical fashion (append) instead of 
just in reversed order (prepand)

Change-Id: Id78c307fc6d34a378ac7b9335ac1e578837b08a6
Reviewed-on: https://code.wireshark.org/review/9170
Petri-Dish: Anders Broman <a.broman58@gmail.com>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2015-06-26 17:42:02 +00:00
Pascal Quantin 2c9a9aff5a Replace pinfo->fd->flags.visited calls by PINFO_FD_VISITED(pinfo) in documentation
Change-Id: If92787ddf3444edc466f04d7c2d9327cb8a50fba
Reviewed-on: https://code.wireshark.org/review/9173
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2015-06-26 17:41:11 +00:00
Martin Kaiser 304f9021f4 PTP: just return, don't throw an exception
Change-Id: Icaca74f7d5038b4e2e232fb499933219b322e02d
Reviewed-on: https://code.wireshark.org/review/9159
Reviewed-by: Martin Kaiser <wireshark@kaiser.cx>
2015-06-26 17:00:11 +00:00
Pascal Quantin 29aecdf032 RRC: remove non ASCII characters from ASN.1 description
Change-Id: I7edb23651caa5ccf8e9989069803a8800e358670
Reviewed-on: https://code.wireshark.org/review/9172
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
2015-06-26 15:50:36 +00:00
Pascal Quantin caf06fea02 PDU export: increase time precision to nano seconds
It will avoid losing precision in case of export from a nseclibpcap input file.
As Wireshark is probably the only tool able to read this link type, we do not need to bother with compatibility.

Change-Id: Iea5b5c88b02ff4799c255f795be2469a091161fe
Reviewed-on: https://code.wireshark.org/review/9171
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
2015-06-26 15:43:16 +00:00
Roland Knall a7a7c689bc epl: Set Payload to remaining bytes
The payload dissection now only includes the remaining bytes,
 even if the actual number of payload bytes should be bigger.

 An expert Info is added, to inform the user, that the trace was
 truncated, but the payload is still given to a sub-dissector,
 as it may contain valid information

Change-Id: Iefef78e7c7aed7f87e40875f345ff5debf364f3a
Reviewed-on: https://code.wireshark.org/review/9124
Reviewed-by: Roland Knall <rknall@gmail.com>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2015-06-26 08:49:00 +00:00
Roland Knall fe679bfa5d openSAFETY: Fix various heuristic bugs
- Wrong true-positives if the frame got wrongly detected

Change-Id: Ifaaec601bde260f8a38c61aad1e5e79b16003c60
Reviewed-on: https://code.wireshark.org/review/9123
Reviewed-by: Roland Knall <rknall@gmail.com>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2015-06-26 08:47:36 +00:00
Evan Huus 8f40e2cd8d tools: permit setting BIN_DIR in the environment
For out-of-tree builds you have to pass the location of your build to our tools
like the fuzz script, valgrind script etc. Modify them so that the value can be
set in the environment rather than requiring a shell script flag.

Set the environment variable in the vagrant provision step, so that the scripts
Just Work (TM) in the VM.

Change-Id: If8ce6b278176085ba6dd994137b82fc989b80124
Reviewed-on: https://code.wireshark.org/review/9168
Reviewed-by: Evan Huus <eapache@gmail.com>
2015-06-26 06:52:58 +00:00
Joerg Mayer 4975c068b5 Disabling GTK by default in the official source was not intentional
(but maybe it should be).

Change-Id: I9dba032951265204e1ced517ad7eb331ec71a6a2
Reviewed-on: https://code.wireshark.org/review/9167
Reviewed-by: Jörg Mayer <jmayer@loplof.de>
2015-06-26 06:51:02 +00:00
Martin Kaiser 40649e3428 ctdb: exit instead of throwing an exception
Change-Id: I58561cf7e8e7f0e20870d271f68eb486b0bb812e
Reviewed-on: https://code.wireshark.org/review/9160
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2015-06-26 02:41:29 +00:00
Joerg Mayer 227f0af79c Make autotools install optional.
Reformat build and install instructions at the end a bit.

Change-Id: I0f6be9e4b58f3987615abcec6521f59ba33b3b0a
Reviewed-on: https://code.wireshark.org/review/9166
Reviewed-by: Jörg Mayer <jmayer@loplof.de>
2015-06-26 00:23:44 +00:00
Joerg Mayer 8ad9019c3f Commit d4aa1a1c24 added some Q_UNUSED
statements to c++ files. The standard method to mark function parameters
as unused in cpp is to just leave out the variable name.

Change-Id: I4f07ad9f494ad16388eadb67e93ea7b26ae70eb5
Reviewed-on: https://code.wireshark.org/review/9152
Reviewed-by: Guy Harris <guy@alum.mit.edu>
Petri-Dish: Anders Broman <a.broman58@gmail.com>
Reviewed-by: Jörg Mayer <jmayer@loplof.de>
2015-06-26 00:21:14 +00:00
Martin Mathieson dd16c55e9f editcap: allow command-line option to set comments for given frame numbers
Change-Id: I608d3c5f56acc58ef7b3e59821a15be49344cc35
Reviewed-on: https://code.wireshark.org/review/9154
Petri-Dish: Martin Mathieson <martin.r.mathieson@googlemail.com>
Reviewed-by: Martin Mathieson <martin.r.mathieson@googlemail.com>
2015-06-26 00:02:31 +00:00
Evan Huus d81ba670a1 wmem: bubble up key type change another function
Follow-up to gb679e2a.

Change-Id: I6cc168c3f3a6e1c8ce7bfa9344255acd3c8a7d20
Reviewed-on: https://code.wireshark.org/review/9164
Reviewed-by: Evan Huus <eapache@gmail.com>
2015-06-25 22:26:12 +00:00
Graham Bloice acbbce9ffb Fix Windows CMake PortableApps dependencies
The nsis_uninstall target appears to create a temporary file
uninstaller_installer.exe that is renamed to uninstall.exe

The above rename upsets the portableapps_app_dir target that is
copying files from the CMake run dir into the portable apps dir.

The change adds a dependency on nsis_uninstall to the portableapps_package
target in an attempt to sequence the copy operation.

Change-Id: I9feb55599eff000f983c23ce29c89fbd3be0a6ac
Reviewed-on: https://code.wireshark.org/review/9153
Reviewed-by: Graham Bloice <graham.bloice@trihedral.com>
Petri-Dish: Graham Bloice <graham.bloice@trihedral.com>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2015-06-25 22:02:15 +00:00
Martin Kaiser 6122b4b616 Qt: when a capture file is closed, go back to the welcome screen only
if we're not capturing to multiple files

Change-Id: I18d36ef8e7e3525b2bd8d94f2b2349cefa3ecb52
Reviewed-on: https://code.wireshark.org/review/9161
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
Reviewed-by: Martin Kaiser <wireshark@kaiser.cx>
2015-06-25 21:59:53 +00:00
Bill Meier b89a4858bb Add Makefile_common.common to wireshark-tap-register.c dependencies (windows)
Change-Id: I22d60e10554e419acda945732faa192fbc21aee6
Reviewed-on: https://code.wireshark.org/review/9163
Reviewed-by: Bill Meier <wmeier@newsguy.com>
2015-06-25 21:45:40 +00:00
Bill Meier e31aef065a Regenerate *-tap-register.c when associated Makefile.common is updated (*nix)
Change-Id: I638e4362bbc24e5a0a990dc7339e285e2ac55839
Reviewed-on: https://code.wireshark.org/review/9158
Reviewed-by: Bill Meier <wmeier@newsguy.com>
2015-06-25 21:36:45 +00:00
Guy Harris cf537c1fee If we don't have both frequency and channel, try to calculate the other.
Just for completeness' sake.

Change-Id: I1ed609431c8bc62a79ebbf837fa2fc62f627a002
Reviewed-on: https://code.wireshark.org/review/9157
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2015-06-25 21:33:29 +00:00
Pascal Quantin a124424422 CredSSP: update template after the API change done in gcdc7d25
Change-Id: I548870ba423c7c3b714047f9f02c6cfb9a6a0661
Reviewed-on: https://code.wireshark.org/review/9156
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
2015-06-25 21:30:57 +00:00