Commit Graph

80356 Commits

Author SHA1 Message Date
Joerg Mayer 1845d71819 lldp: Add Extreme/Avaya Fabric Vendor specific sub-TLV decoding
- Add Vendor Code d8:84:66
- Add Vendor sub-TLV 4
2021-04-01 15:45:38 +02:00
Amit Cohen e100466798 packet-netlink-psample: Align enum ws_psample_attrs to kernel header
Psample attributes were reordered in kernel header include/uapi/linux/psample.h
as part of commit e43accba9b07 [1].

Align enum ws_psample_attrs to the new order and fit the related code.

[1]:
https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=e43accba9b071dcd106b5e7643b1b106a158cbb1

Signed-off-by: Amit Cohen <amcohen@nvidia.com>
2021-04-01 12:24:52 +03:00
Uli Heilmeier ea20002a07 QT: Fix printer dialog
Fix EXC_BAD_ACCESS error by using printer variable.
2021-04-01 08:45:46 +00:00
Gerald Combs 3b8574b244 WSDG: We build with vcpkg's libpcap on Windows. 2021-04-01 08:27:28 +00:00
Martin Mathieson 7a261fb538 Make a couple of functions static. 2021-04-01 08:08:05 +00:00
j.novak@netsystem.cz 4e5f0456c6 RTP Player: Added ability to save streams as .au and .wav
Features:
- saves multiple streams (all selected and unmuted)
- saves streams same way they are played (jitter buffer, sampling, ...)
- only streams with audio (play rate >0) are exported
  - streams with play rate == 0 are silently ignored even selected for
    export
- all exported streams must use same play rate (user can change it
  before save)
2021-04-01 08:07:22 +00:00
John Thacker e44db606fa DIAMETER: Process BCD encoded IMEISV in User-Equipment-Info
Some example captures of DIAMETER show the IMEISV in User-Equipment-Info
being BCD encoded (as commonly seen in other protocols.) If the number
of octets used is 8, assume it is BCD encoded. If the number of octets
used is 16, assume it is ASCII. Otherwise, set an expert info for the
wrong length like the other types.

Use the defined constants to verify the lengths of the MAC, EUI64, and
MODIFIED_EUI64 types. Correct the length of the Modified EUI64 type,
as it is also 8 bytes, the same as EUI64 (there must have been confusion
with IPv6 addresses, which contain a Modified EUI64 in their 8 least
significant bytes.)
2021-04-01 07:28:21 +00:00
Richard Sharpe 67f072e9f5 ieee80211: Add further support for 802.11az D3 ranging parameters.
This adds the the ISTA Availability Window elemen, the RSTA Availability
Window element and the Secure LTF Parameters element, as well as the
TB Specific Subelement.

Change-Id: Iaa6517c6dcd4fafc7d588cb69d71ad4b968f1b5a
2021-04-01 02:34:49 +00:00
Gerald Combs a80ea46ff7 CMake: Enable AUTO{MOC,UIC,RCC} according to our CMake version.
As noted in be2b0fc810, we need to set CMAKE_AUTO* before searching for
Qt packages when using 3.20.0 and later. However, this fails if we're
using CMake 3.9.6 or earlier. Set CMAKE_AUTO* where needed depending on
our CMake version.

Ping #17314.
2021-03-31 20:02:18 +00:00
Roman-Koshelev f4d0273a15 TFTP: Added tftp heuristic dissector
We know enough about a TFTP request to distinguish it from others
with a high degree of probability.
2021-03-31 19:41:50 +00:00
Roman-Koshelev 60509540b9 TFTP: strengthen heuristic for RRQ/WRQ
Added mode check for RFC 1350 compliance
2021-03-31 19:41:50 +00:00
Roman-Koshelev 966347c441 TFTP: Added conversation dissector check
To avoid reacting to other people's conversations (e.g. udp)
2021-03-31 19:41:50 +00:00
Uli Heilmeier 81d1c8dbc8 PCEP: Updating some IANA defined types/codes
Update some types and codes as defined at
https://www.iana.org/assignments/pcep/pcep.xhtml
2021-03-31 16:40:56 +00:00
j.novak@netsystem.cz 7e39f4eb86 RTP Player: Added ability to save streams as .au and .wav
Features:
- saves multiple streams (all selected and unmuted)
- saves streams same way they are played (jitter buffer, sampling, ...)
- only streams with audio (play rate >0) are exported
  - streams with play rate == 0 are silently ignored even selected for
    export
- all exported streams must use same play rate (user can change it
  before save)
2021-03-31 14:52:06 +00:00
John Thacker 68ba60774f Prettify and standardize LAC, RAC, SAC, TAC in several ASN.1 dissectors
The LAC, RAC, SAC, and TAC tend to be defined in ASN.1 as OCTET STRINGS
of lengths 1, 2, or 3. It generally makes sense to dissect them as
FT_UINT[8,16,24], as appropriate, with BASE_DEC_HEX instead of as FT_BYTES,
so standardize on that.  See commit d6f91a7ca4
for similar work for S1AP.
2021-03-30 21:48:00 -04:00
Richard Sharpe f29563b860 ieee80211: Add support for PASN Authentication frames.
This conforms more to D3 of 802.11az and I cleaned up the handling of
authentication frames. I also reworked the handling of PASN parameters
since they were not quite right.

Change-Id: I5356561da0fec223090f4c2e9f32de7b920693cb
2021-03-31 00:09:45 +00:00
Guy Harris 94bb564996 conversation: use the Wayback Machine for a URL.
That's now a dead link; use the Wayback Machine to get at it.
2021-03-30 14:46:34 -07:00
Jirka Novak 7445635fdc RTP Player: Allow a user to select output rate
Tool allows a user to replay at specific rate when there is any issue
with autodetected rate by payloads.
Offered rates are provided by selected audio device.
2021-03-30 19:17:28 +00:00
Cristian Sava b06a3c5eb8 NAS 5GS: Fix dissection of EAP Message in PDU Session Authentication Result. 2021-03-30 18:39:03 +03:00
Constantine Gavrilov cf827f248d NVMe: Decode all fields of Identify Controller Reply.
Closes #17282.
2021-03-30 12:11:46 +00:00
Jirka Novak 58ec37f093 RTP Player: Added play rate of decoded audio
It shows which rate wireshark really decoded the stream and how it will
be played.
2021-03-30 08:19:55 +00:00
Jirka Novak 47862d8fce RTP Player: Dialog is nonmodal now and can be called multiple ways
Changes:
- refactored main_dialog handling of telephony dialogs
- RTP Player dialog is nonmodal now and can be left open
- it is possible to issue three actions on RTP Player dialog from other
  dialogs (other dialog have selected set of RTP streams before action)
  - replace - removes existing streams from RTP dialog and shows new set
  - add - adds new set to existing list in RTP dialog
  - remove - remove streams in set from list in RTP dialog
- Sequence Dialog:
  - was modified to hold rtpstream_info_t for RTP streams
  - added Play button
  - VoIP features (RTP Play button, select/deselect RTP stream) are
    disabled after creation and must be enabled. It handles that RTP
Play button is not shown e.g. in TCP sequence show
2021-03-30 07:57:22 +00:00
Vadim Yanitskiy e43058ca59 A-bis/OML: Improve dissection of ip.access specific IEs 2021-03-30 07:56:41 +00:00
Joerg Mayer 22b2d8e1fc isis: TLV 147 is not proprietary, it's MAC Reachablity from RFC 6165 2021-03-30 06:22:59 +00:00
Joerg Mayer a60cde8eb0 isis: Updates to Avaya proprietary TLV 184 decoding
- Add TLV 184 sub TLV 1: IPv4 Metric Type
- Fix hexpane length of unknown sub TLVs
2021-03-30 06:22:59 +00:00
João Valverde 5dd15cd56c RPM: Don't install HTML manuals twice
Fixes e4d4814168.
2021-03-30 03:00:17 +01:00
Gerald Combs 5848d8a6f2 RPM: Update the HTML documentation location. 2021-03-29 15:16:36 -07:00
Peter Lemenkov a9c119a6a6 RTPproxy: typo
Change-Id: Ie9647f74bae0bc6777c7394a23dd125f5ca4ecc9
Signed-off-by: Peter Lemenkov <lemenkov@gmail.com>
2021-03-29 20:59:46 +00:00
Peter Lemenkov c0249887af RTPproxy: update list of errors
RTPproxy: update list of errors according to commit
sippy/rtpproxy@b9d7b4ced2.

Change-Id: I885edb02a7e74240627d68ece5c1d12d45081048
Signed-off-by: Peter Lemenkov <lemenkov@gmail.com>
2021-03-29 20:59:46 +00:00
João Valverde e4d4814168 Don't install HTML manuals twice.
Wireshark loads HTML files as resources from "/usr/share/wireshark"
on Unix-like systems and from the $build/run directory when run that
way. There are also other locations specific to other platforms and
packaging solutions and multi-config builds.

HTML manuals are installed both to "/usr/share/wireshark" and
"/usr/share/doc/wireshark" for Unix-like systems. For now install them
only to the former to avoid unnecessary clutter and duplication. The
manuals can be consulted using 'man' or launched in HTML format from
Wireshark's help menu (or found in $pkgdatadir instead of $docdir).

Eventually we may want to simplify that maze of locations for HTML
resources and have Wireshark load the manuals from $docdir instead
on Unix, and do the right thing for the other platforms, etc.
2021-03-29 20:20:11 +01:00
Mikael Kanstrup d08fa84025 ieee80211: Dissect decrypted FT BSS Transition GTK subelem
The GTK key provided in FT BSS Transition IE is encrypted. Update
dot11decrypt engine to return the decrypted key for dissection.

Change-Id: Id31a8cf77e12568f2e449470822a64792895673c
2021-03-29 11:18:38 +00:00
Michał Kaźmierowski 1f9ff3f547 OER: parse extensions in SEQUENCE and CHOICE definitions 2021-03-29 10:56:38 +00:00
Martin Mathieson 678914ca0b Fix some item lengths.
As seen by tools/check_type_item_lengths.py
2021-03-29 05:30:27 +00:00
João Valverde 7fee50274f Merge the caputils/ and capchild/ directories
The distinction between the different kinds of capture utility
may not warrant a special subfolfer for each, and sometimes the
distinction is not be clear or some functions could stradle
multiple "categories" (like capture_ifinfo.[ch]).

Simplify by having only a generic 'capture' subfolder. The
separate CMake libraries are kept as a way to reuse object code
efficiently.
2021-03-29 06:08:02 +01:00
Guy Harris 2ba52cdc0e tvbuff_subset: fix its implementation of string scanning.
Both subset_find_guint8() and subset_pbrk_guint8() pass the parent
tvbuff to tvb_find_guint8()/tvb_ws_mempbrk_pattern_guint8(), along with
the offset in that tvbuff.

That means that the offset they get back is relative to that tvbuff, so
it must be adjusted to be relative to the tvbuff *they* were handed.

For subsets of frame and "real data" tvbuffs, there's a single lump of
data containing the content of the subset tvbuff, so they go through the
"fast path" and get the offset correct, bypassing the broken code;
that's the vast majority of calls to those routines.

For subsets of *composite* tvbuffs, however, they don't go through the
"fast path", and this bug shows up.

This causes both crashes and misdissection of HTTP if the link-layer is
PPP with Van Jacobson compression, as the decompression uses composite
tvbuffs.

Fixes #17254 and its many soon-to-be-duplicates.
2021-03-29 01:02:47 +00:00
João Valverde 22cf2cb345 CMake: Set CMake Policy CMP0071 to NEW
This policy says: "Since version 3.10, CMake processes regular and GENERATED
source files in AUTOMOC and AUTOUIC. In earlier CMake versions, only regular
source files were processed. GENERATED source files were ignored silently."

We are currently running AUTOMOC/RCC/UIC on too many files unnecessarily and
that should be improved. CMake 3.20 introduced some changes related with this
that broke the build (issue #17314) and need further investigation.

Meanwhile setting this policy to NEW shouldn't break anything and silences
some noisy CMake warnings.
2021-03-29 01:33:39 +01:00
João Valverde d7401147b4 CMake: Remove non existent '/codecs' include path
The '/codecs' dir was removed in g63af1da7e7.

Avoid using include_directories(), prefer target_include_directories().
Remove some unnecessary CMAKE_CURRENT_*_DIR includes and some other
small cleanups while at it.
2021-03-29 00:00:57 +00:00
João Valverde 0fd2033ba2 plugin_ifdemo: Add missing QtMultimedia dependency
On my system I had to add a QtMultimedia dependency to get this plugin
to build.
2021-03-29 00:00:57 +00:00
Preston Hunt 5595cfb3e5 IEEE 802.11: Add dissection of PASN Parameters
Adds dissection of the Pre-Association Security Negotiation (PASN)
Parameters element.
2021-03-28 07:21:00 -07:00
Preston Hunt 00bf70e446 IEEE 802.11: add AKMs 19 and 20
Adds 19, FT using PSK (SHA384), and 20, PSK (SHA384), both defined in
802.11-2020.
2021-03-28 11:23:44 +00:00
Gerald Combs cc3ee84516 [Automatic update for 2021-03-28]
Update manuf, services enterprise numbers, translations, and other items.
2021-03-28 09:30:09 +00:00
Martin Mathieson eaf6554aa1 ISIS-LSP: Fix length of a field.
SID/Label Binding TLV Range field is 2 bytes.
2021-03-28 06:05:15 +00:00
Guy Harris cda18f951e wslua_tvb: correctly trim off the end of a tvbuff.
The length specified in a TvbRange is the *actual packet length*, not
the *sliced-to* length, so use tvb_new_subset_length() to cut it short.

This fixes the fix for #15655, and addresses at least some of the issues
in #17255.
2021-03-27 19:31:37 -07:00
Guy Harris 2b9a6ee592 text_import: just suppress the two-initializers warning.
Stick with the simpler "init everything to invalid, and then override
that" mechanism, and just turn off the warning for thse structures.
2021-03-27 14:00:44 -07:00
Guy Harris fd39930f40 text_import: don't initialize array elements twice.
Some compilers warn about it with -Winitializer-overrides, and default
to setting that.
2021-03-27 12:35:01 -07:00
Tomasz Moń 5bbfee2ed8 protobuf: fix leaking tokens
Move scanner destroy call to pbl_clear_state() so it is freed if
parsing fails.

This eliminates most of leaked memory reported in #17305.
2021-03-27 17:23:07 +00:00
Jirka Novak 1c59f7d9ac RTP Player: Decoding of audio improved
Changes:
In nearly all cases decoding match content of capture. The exception is #2270,
where timestamps do not match recorded time which causes discrepancy in
decoding.
Decoding of audio correctly follows different soundcard rates.
RTP Player shows first sample rate in each stream in place of rate of playing.
Fixed incorrect time axis calculation

Fixes #16837
Fixes #4960
Fixes #2270
2021-03-27 12:12:43 +00:00
Jirka Novak e75e1fb580 Follow SIP Call: Added Follow SIP Call to Follow menu
Changes:
- epan/follow.c: follow_conv_filter_func has new parameter
  epan_dissect_t *edt, so filter can be generated based on decoded tree
of packet below the cursor
- menu Follow/SIP Call is enabled when sip packet is selected
- value of sip.Call-ID is used as filter for SIP call
- for sharkd it generates filter just 'sip.Call-ID' with no value
2021-03-27 09:02:14 +00:00
Jirka Novak cd5b568233 RTP Player: Showing of setup frame for RTP stream fixed
When RTP stream has no setup frame, but is decoded by Decode as or
with rtp_udp active, setup frame was shown as SETUP <number>, but
correct is RTP <number>.
2021-03-27 08:45:22 +00:00
Guy Harris 828b43491c macos-setup: the current Python is 3.9.2.
While we're at it, capitalize "Arm".  (That's how Arm Ltd. is spelling
it now, even in the architecture versions, e.g. "Armv8-A".)
2021-03-26 21:32:31 -07:00