Commit Graph

69022 Commits

Author SHA1 Message Date
Michael Mann db3be9f850 Remove display of "old" key in GTK configuration hashtable dialog
The information was for internal debugging, presumably as conversations
were converted to use the new algorithm.  The algorithm has been in
place for a few years now and GTK is deprecated.

Change-Id: Ice0d0611bfbc0970089c671ab2cca15bfa5bf2fa
Reviewed-on: https://code.wireshark.org/review/24147
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-10-28 18:18:25 +00:00
Nikolai Ipatyev 051dcd1086 Fix bug in FMPUX heuristic dissector
The variables in the check were reversed

Change-Id: Idc7fc2b88ac1cde699b76423890918ce4b0ac086
Reviewed-on: https://code.wireshark.org/review/24149
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-10-28 17:38:27 +00:00
Michael Mann 7df5fcdc51 Share use of conversation_hash_exact
It was duplicated in GTK, so just make it public (at least for now)

Change-Id: I89d985b2d42f0edb1c535a65a97b132920dedbcd
Reviewed-on: https://code.wireshark.org/review/24146
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-10-28 16:00:46 +00:00
Michael Mann 23afd9a184 Convert to using find_conversation_pinfo where appropriate
This makes it easier to identify the simpler/common conversations

Change-Id: I7094f23e49156ee27f5f72c8e130308470f3e462
Reviewed-on: https://code.wireshark.org/review/24145
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-10-28 14:33:11 +00:00
Michael Mann 27c10ed72e AMQP: Add dissector table for versions so they can be dissected with Decode As
Bug: 14113
Change-Id: I73c4962597d8f8bab83f089c9821269e0b7b1568
Reviewed-on: https://code.wireshark.org/review/24109
Petri-Dish: Michael Mann <mmann78@netscape.net>
Reviewed-by: Magnus Henoch <magnus.henoch@gmail.com>
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-10-28 14:01:15 +00:00
Alexis La Goutte 5907d17b9a QUIC: Display Connection ID (CID) on hexa
Ping-Bug: 13881
Change-Id: I7b97e27b6d2091a18e5fc3fd27251523a446cfde
Reviewed-on: https://code.wireshark.org/review/24020
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-10-28 13:53:03 +00:00
Alexis La Goutte b0edc623b1 IEEE 1905.1a: fix an infinite loop (CID 1420355)
Change-Id: Iaa8e82cb5dc9f32e5c9dbf1db1068868d6fd3f18
Reviewed-on: https://code.wireshark.org/review/24144
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-10-28 12:01:22 +00:00
Guy Harris 695d8fc318 MOAR PRE-ALLOCATED FIELDS.
Do what the errors in the master buildbots say to do.

Change-Id: I2b926bd9a75a1490390c42b8080f29e48096a3b4
Reviewed-on: https://code.wireshark.org/review/24143
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2017-10-28 05:25:46 +00:00
Guy Harris 2b615cf322 Also display the protocol with -G dissector-tables.
Change-Id: If5c61195ad6bfb86c8e047428abaa6b0d48e7d74
Reviewed-on: https://code.wireshark.org/review/24142
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2017-10-28 04:26:19 +00:00
Guy Harris 985c0594a5 Indicate Decode As support in the -G dissector-tables output.
Change-Id: I95535ba11fdcac37057d1441e850ddf5455d32cf
Reviewed-on: https://code.wireshark.org/review/24141
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2017-10-28 04:18:22 +00:00
Guy Harris a1218446d9 Put all the 11n vs. 11ac stuff together.
Also, there's no need to zero out the NSS values for 11ac - we zero out
the entire pseudo-header at the beginning.  We only need to set them if
we *have* them.

Change-Id: I9ebda7e246c24941ca77314bba6f86dea41e5992
Reviewed-on: https://code.wireshark.org/review/24135
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2017-10-28 03:29:59 +00:00
Michael Mann 7ddfee9aea tshark: Use -G help instead of -G ?
Not all platforms handle ? or -? *predictably* at the command line.
As long as "?" isn't replaced with a file name, it works, but if it
gets replaced by a file name...

Bug: 13984
Change-Id: I4496bb27fdef121967e7baf7b7f4a1bb0a44b00a
Reviewed-on: https://code.wireshark.org/review/24125
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-10-28 03:22:59 +00:00
Guy Harris 7c9ec1d13c Don't add for "Decode As" if the dissector table doesn't support it.
While we're at it, consistently use "name" as the name of the argument
giving the dissector table name.

Change-Id: Ied54c88d0d3dd467fe9067b008b49ead754c31a2
Reviewed-on: https://code.wireshark.org/review/24131
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2017-10-28 02:44:19 +00:00
Michael Mann 89e40fad29 packet-knxnetip.c: Fix bitmask
Bug: 14115
Change-Id: I836ee337f4727b0592cda074975c20a68fe7a27d
Reviewed-on: https://code.wireshark.org/review/24124
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-10-28 02:31:58 +00:00
Michael Mann c6c709490c Q931: Fix Q931_ISO_IEC_STANDARDIZED_CODING value
It's typically masked with 0x60 without any bit shifting,
so make the value reflect it

Bug: 14116
Change-Id: I677c609a8e19a66ee557ac24c721ecb2312131a5
Reviewed-on: https://code.wireshark.org/review/24123
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-10-28 01:13:42 +00:00
Bruno Verstuyft ce181cbc87 DOCSIS: DPD: adding modulation list to info column
Change-Id: I5d99692d897f17e6e14952db8e4736ca65aa1373
Reviewed-on: https://code.wireshark.org/review/24106
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-10-28 00:25:40 +00:00
Michael Mann 087faa2488 Always provide value for Decode As selector column
Previous logic required multiple values from the decode as structure in
order to provide an initial value.  This was incorrect and led to
values from protocol not selected showing in the selector column.

Change-Id: If1ad5085f4a6eb8d79fc5dd72be968188051ec4e
Reviewed-on: https://code.wireshark.org/review/24122
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-10-28 00:24:42 +00:00
Thomas Wiens 86302a7622 s7comm: Syntax-id decoding of frequency inverter parameters
Add Syntax-id decoding for accessing frequency inverter parameters.
Moved the decoding of all other syntax-ids to separate functions.

Change-Id: Iba41f0631c4aeaf31a4ec6f73ffc42ca0b76f00d
Reviewed-on: https://code.wireshark.org/review/24102
Petri-Dish: Anders Broman <a.broman58@gmail.com>
Tested-by: Petri Dish Buildbot
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-10-27 23:47:41 +00:00
Nicolas Darchis 86cb152b2f peekremote: Support properly 11ac MCS rates.
The spatial streams amount support is still to be added.

Bug: 14136
Change-Id: I58b4ff4febcbd871c063a7add6a1e6b79ef23683
Reviewed-on: https://code.wireshark.org/review/24079
Petri-Dish: Michael Mann <mmann78@netscape.net>
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-10-27 23:31:55 +00:00
Michael Mann 3a6552744f Add find_conversation_pinfo
Convenience function to add the same parameters to find_conversation as
find_or_create_conversation.

Change-Id: I3a92541cb9c1e827a9de8248825636debbd989cd
Reviewed-on: https://code.wireshark.org/review/24118
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-10-27 21:51:49 +00:00
Michael Mann f24651493d OSPF: dissect_ospf_bitfield -> proto_tree_add_bitmask
Change-Id: Iaaa76ac8a5aad457258de3c23828cf3738f612c2
Reviewed-on: https://code.wireshark.org/review/24110
Reviewed-by: Michael Mann <mmann78@netscape.net>
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2017-10-27 21:43:47 +00:00
Magnus Henoch 4c8dfe6f6e Autodetect more AMQP 0-9 captures
When an capture file containing AMQP 0-9 traffic is missing the
protocol header, and the first packet contains more than one AMQP
frame, we'd fail to detect the protocol version properly, since we'd
check for the frame size being equal to the PDU size.  Fix this case
by checking if the frame fits within the PDU instead.

While it's possible that 0-10 and 1.0 captures could be misdetected as
0-9, this seems highly unlikely.  See details in comment in
packet-amqp.c.

Bug: 14113
Change-Id: I98978ed3919be3daf7fe9a972b87e09f27ba20e3
Reviewed-on: https://code.wireshark.org/review/24108
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-10-27 21:34:30 +00:00
João Valverde c59601eeea Remove AC_PROG_GCC_TRADITIONAL from configure.ac
Apparently this macro is (was?) used for CPP and some esoteric old non-ISO C headers,
which we don't use.

(Introduced with the very first Wireshark git commit.)

Change-Id: I22c32161aaa8df450d36d145b03cfcd62aa6268a
Reviewed-on: https://code.wireshark.org/review/24119
Reviewed-by: João Valverde <j@v6e.pt>
2017-10-27 21:07:45 +00:00
Jeff Dyer 398dc81127 Change NewCo to new Company name, Aliv
Change-Id: I84c06a7f168da0f65b7c76360f38f39ecf1024d0
Reviewed-on: https://code.wireshark.org/review/24112
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-10-27 20:47:25 +00:00
João Valverde e2afd06e65 YACC is set to the missing script if not found
Change-Id: I38ce7542e96c7571fa179e550cfba39d16dc417f
Reviewed-on: https://code.wireshark.org/review/24117
Reviewed-by: João Valverde <j@v6e.pt>
2017-10-27 20:38:55 +00:00
João Valverde 764431f882 autotools: Fix LN_S usage
"cp" always takes two arguments.

Change-Id: I6183988a24a38b1091d31a4e533b329f89f35dac
Reviewed-on: https://code.wireshark.org/review/24113
Petri-Dish: João Valverde <j@v6e.pt>
Tested-by: Petri Dish Buildbot
Reviewed-by: João Valverde <j@v6e.pt>
2017-10-27 19:55:52 +00:00
Pascal Quantin 42f5aa4566 IEEE 1905.1a: fix an infinite loop (CID 1420356)
Change-Id: I39b75acbf3598ad4e32e268f4b4378f16ca273c6
Reviewed-on: https://code.wireshark.org/review/24107
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
Petri-Dish: Pascal Quantin <pascal.quantin@gmail.com>
Tested-by: Petri Dish Buildbot
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-10-27 16:20:23 +00:00
AndersBroman 33d28030b1 [AMR] Change the Payload type preference to a range and have separate
ranges for AMR and AMR-WB.

Change-Id: If5dca10b226a09168f1b1f834d97b826f8b777d6
Reviewed-on: https://code.wireshark.org/review/24105
Reviewed-by: Anders Broman <a.broman58@gmail.com>
Petri-Dish: Anders Broman <a.broman58@gmail.com>
Tested-by: Petri Dish Buildbot
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-10-27 15:47:24 +00:00
AndersBroman 395c54c489 [BSSGP] Fix decoding of PERFORM-LOCATION-REQUEST.
Change-Id: I5039c93bd4f572599386a314a16230d7c1aaaf23
Reviewed-on: https://code.wireshark.org/review/24104
Petri-Dish: Anders Broman <a.broman58@gmail.com>
Tested-by: Petri Dish Buildbot
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2017-10-27 14:49:45 +00:00
AndersBroman bb7511bccf [BSSMAP-LE] Add dissection of 10.18 Location Type.
Change-Id: I54900e13eca61cd1f190934a77cb0e704c877dfe
Reviewed-on: https://code.wireshark.org/review/24103
Petri-Dish: Anders Broman <a.broman58@gmail.com>
Tested-by: Petri Dish Buildbot
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2017-10-27 14:36:12 +00:00
Taisuke Sasaki 4ee492e910 OSPFv2 Segment Routing extention support with RFC7684.
- RFC7684
- draft-ietf-ospf-segment-routing-extensions-20

Bug: 12297
Change-Id: I3acafe95ae2ef44a433c38c2495169d77e3c955d
Reviewed-on: https://code.wireshark.org/review/24070
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-10-27 14:25:15 +00:00
Marius Paliga 545f200224 PFCP: Dissect Node ID: Fix length of FQDN Node Id Type
Octet 5 (Spare Node/ID Type) is included in the IE length
and FQDN uses just remainding length

Change-Id: I9c6e1de850bda0af315cbf801e757af6b25ed33e
Reviewed-on: https://code.wireshark.org/review/24101
Reviewed-by: Michael Mann <mmann78@netscape.net>
Petri-Dish: Michael Mann <mmann78@netscape.net>
Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
Tested-by: Petri Dish Buildbot
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2017-10-27 13:51:18 +00:00
Pascal Quantin 0a033cdc65 IEEE 1905.1a: remove an unused hf variable
Change-Id: I03d37495937020407783d366d01e3ad353889e80
Reviewed-on: https://code.wireshark.org/review/24098
Petri-Dish: Pascal Quantin <pascal.quantin@gmail.com>
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
2017-10-27 08:52:57 +00:00
Pascal Quantin b085418501 IEEE 1905.1a: add what seems to be missing breaks
Change-Id: I60b41e503bc8933fb2efb2016b565caa0ec3bb97
Reviewed-on: https://code.wireshark.org/review/24097
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
2017-10-27 08:52:37 +00:00
Pascal Quantin 4330b268b2 debian: add ws_compiler_tests.h to libwsutils-dev.install
Change-Id: Ia2db7069a22c4786b0628fd554038b3091388963
Reviewed-on: https://code.wireshark.org/review/24099
Petri-Dish: Pascal Quantin <pascal.quantin@gmail.com>
Tested-by: Petri Dish Buildbot
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
2017-10-27 08:52:25 +00:00
Richard Sharpe db41ccd009 Device provisioning protocol: Fix a last issue with DPP and Configuration
commands not being searchable.

Change-Id: I28cf212b3eacb16572ce9d1ff2dbf45040046b00
Reviewed-on: https://code.wireshark.org/review/24069
Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com>
Tested-by: Petri Dish Buildbot
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2017-10-27 04:22:45 +00:00
Guy Harris 42a9e893fb Clean up a bit.
If we're using Clang, use either _Pragma("clang diagnostic XXX") or
nothing; don't use _Pragma("GCC diagnostic XXX").  If we're using
something other than Clang that is, or claims to be, GCC, use
_Pragma("GCC diagnostic XXX") or nothing.

Explain why we're only using _Pragma("GCC diagnostic XXX") with GCC 4.8
or later, even though it's supported in GCC 4.2 and later, and even
though 4.6 an later support _Pragma("GCC diagnostic {push,pop}").

Change-Id: I7a5f46ec419b945663d473cb4ae435ab7fdcf0ef
Reviewed-on: https://code.wireshark.org/review/24096
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2017-10-27 02:01:03 +00:00
Paul Offord 1ceab868cd TRANSUM: File loading slow with transum enabled
This change improves performance through better handling of SYN -
SYN/ACK pairs.

Bug: 14094
Change-Id: Ie479f1b69fa48f85a2ed9f8f173533db25582bbd
Reviewed-on: https://code.wireshark.org/review/24090
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-10-27 01:40:51 +00:00
Guy Harris 4e4f1debb7 Fix typo.
Change-Id: I27373dd3823d3527ad3ebf272169feb7323b1a83
Reviewed-on: https://code.wireshark.org/review/24094
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2017-10-27 01:27:41 +00:00
Pascal Quantin e82adfba74 proto.c: do not set an item length longer that the remaining tvb length
Ping-Bug: 14128
Change-Id: Iae5cb2f85d5d2fa3f2b6051aa57390a3f73d724a
Reviewed-on: https://code.wireshark.org/review/24087
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
Petri-Dish: Pascal Quantin <pascal.quantin@gmail.com>
Tested-by: Petri Dish Buildbot
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-10-26 23:37:51 +00:00
Pascal Quantin ed20250c13 proto.c: protect against buffer overflow in proto_find_undecoded_data()
Bug: 14128
Change-Id: I01aadf2dc9a3f714caaef273a7e012c6f1840726
Reviewed-on: https://code.wireshark.org/review/24088
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
Petri-Dish: Pascal Quantin <pascal.quantin@gmail.com>
Tested-by: Petri Dish Buildbot
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-10-26 22:57:30 +00:00
Guy Harris a0973d0f94 Move the compiler version tests to ws_compiler_tests.h and use them elsewhere.
While we're at it, sort some header file lists, and clean up white
space.

Change-Id: If737dda45334fedf1df7295d8719ad9381daf7a1
Reviewed-on: https://code.wireshark.org/review/24089
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2017-10-26 22:01:16 +00:00
Christopher Maynard ea49c337c5 Include VLAN ID in key for ICMP request/response tracking
Add global preference to allow for "stricter" conversation tracking

Bug: 13518
Change-Id: I166a084c402374fa76dac7bb54f941e2e9c9325a
Reviewed-on: https://code.wireshark.org/review/22842
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-10-26 21:33:19 +00:00
Richard Sharpe 05b1d35586 Initial coding of the ieee1905 dissector with Multi-AP support.
Change-Id: I94da228cba6baf20a2cd02bafc9704492f2cfc9f
Reviewed-on: https://code.wireshark.org/review/23956
Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com>
Reviewed-by: Richard Sharpe <realrichardsharpe@gmail.com>
Tested-by: Petri Dish Buildbot
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-10-26 20:24:03 +00:00
Jakub Zawadzki b4a6f4e244 oss-fuzzshark: add missing include to fix implicit declaration of color_filters_init()
/src/wireshark/tools/oss-fuzzshark/fuzzshark.c:218:7: warning: implicit declaration of function 'color_filters_init' is invalid in C99 [-Wimplicit-function-declaration]
        if (!color_filters_init(&err_msg, NULL))
             ^
1 warning generated.

Change-Id: I37dbc4521b6a3cda271e6e33a290ed35911e7dda
Reviewed-on: https://code.wireshark.org/review/24086
Petri-Dish: Jakub Zawadzki <darkjames-ws@darkjames.pl>
Tested-by: Petri Dish Buildbot
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2017-10-26 19:52:56 +00:00
Guy Harris 6d092c1344 Whitespace cleanups.
Change-Id: Ic19c143fc9143da230f286f1fe4aecc0fe8b08be
Reviewed-on: https://code.wireshark.org/review/24085
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2017-10-26 18:39:22 +00:00
Guy Harris 985a8f297b Move a comment to where it belongs, expand another comment.
Change-Id: I04eff374132cbe4b93271c7a43303db406998bcb
Reviewed-on: https://code.wireshark.org/review/24084
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2017-10-26 18:25:15 +00:00
Gerald Combs 6ddee4aab2 We don't need to define sockaddr_storage.
Winsock2.h will do that for us via packet32.h.

Change-Id: Ie834d49b052c3db6784481bb85d94d4eecff8287
Reviewed-on: https://code.wireshark.org/review/24082
Petri-Dish: Gerald Combs <gerald@wireshark.org>
Tested-by: Petri Dish Buildbot
Reviewed-by: Gerald Combs <gerald@wireshark.org>
2017-10-26 18:22:59 +00:00
Guy Harris fb160e53c8 Use more than just "does it claim to be GCC?" to test for attributes.
Not all versions of GCC or Clang have the returns_nonnull function
attribute, so use the same technique used in current master branch
libpcap - use __has_attribute() if it's available, otherwise use
compiler version tests.

This also lets us use WS_NORETURN on some non-GCC compilers.

Change-Id: I6ca4a81797ebfca9f743e16f83839c49d303da81
Reviewed-on: https://code.wireshark.org/review/24083
Reviewed-by: Guy Harris <guy@alum.mit.edu>
2017-10-26 18:19:49 +00:00
Gerald Combs b7f7bee8cf CMake: Set the Windows build target to Vista.
Set NTDDI_VERSION and _WIN32_WINNT to their Vista values so that
ws2tcpip.h will define inet_pton and inet_ntop. Remove the associated
compiler version checks so that everyone is on the same page.

Add breadcrumbs to the various parts of the code where we set a minimum
Windows version.

Change-Id: I83bba5fa1024bfbc02e07b120412807ad259e291
Reviewed-on: https://code.wireshark.org/review/24080
Petri-Dish: Gerald Combs <gerald@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
Reviewed-by: Gerald Combs <gerald@wireshark.org>
2017-10-26 17:57:28 +00:00