Commit Graph

83606 Commits

Author SHA1 Message Date
John Thacker 52955b9c43 Qt: highlight when search result is in the current packet.
Calling setCurrentIndex with QItemSelectionModel::ClearAndSelect clears
the currentIndex, but not the selection, so it doesn't trigger
selectionChanged. However, highlighting depends on the selectionChanged
signal, not currentChanged(), and it's not emitted if we're still on the
same packet/row as the current selection (which can occur if searching
for something that occurs in exactly one packet in a capture.)

Since packet_list_select_row_from_data() cares about where the data
is within the packet, it needs to clear the selection.  Fix #8269
2022-02-11 18:21:35 +00:00
John Thacker 0011bb6a4c Qt: Allow omitting secondary data sources when printing
Add a checkbox to the packet format group box to allow the
hexdump to only have the main frame instead of secondary data
sources as well, so that Print and Export Packet Dissections can
be used for input to text2pcap.
2022-02-10 23:28:53 -05:00
David Perry fc3f061829 Differentiate `-c` from `-a packets:` 2022-02-11 01:54:53 +00:00
Jérôme HAMM 4b8c280d68 ssh: fix warnings found by Clang Analyzer (deadcode.DeadStores) 2022-02-10 14:29:11 +00:00
Jérôme HAMM 5ddca40727 ssh: dissecting server signature 2022-02-10 14:29:11 +00:00
Jérôme HAMM 9f2e1dbaf5 ssh: dissecting generic connection packets 2022-02-10 14:29:11 +00:00
Jérôme HAMM 54a9d92b28 ssh: dissecting specific user authentication packets 2022-02-10 14:29:11 +00:00
Jérôme HAMM 62489e0b57 ssh: dissecting generic user authentication packets 2022-02-10 14:29:11 +00:00
Jérôme HAMM ae394cd42a ssh: dissecting generic transport packets 2022-02-10 14:29:11 +00:00
Jérôme HAMM 15046059cb ssh: displaying sequence number 2022-02-10 14:29:11 +00:00
Jérôme HAMM 41b442d9c0 ssh: checking and showing Message Authentication Code 2022-02-10 14:29:11 +00:00
Dror Eiger 7ea9bab84b Geneve: new option classes 2022-02-10 14:07:06 +00:00
Gerald Combs e1dbf36519 Docs: Add new protocols to the release notes. 2022-02-09 11:28:07 -08:00
Alexis La Goutte 84569f3ab8 ieee80211: add support of Fortinet Vendor Specific
Only support type 10 (SYSTEM ?) with subtype 1 (AP-NAME)

See https://www.nickjvturner.com/ap-name-broadcast-support for pcap
2022-02-09 18:23:26 +00:00
David Perry 1e0d117eb7 Specify directory for temporary captures 2022-02-09 14:32:28 +00:00
John Thacker f72787e86f TCP: Fix SYN and FIN retransmission vs ooo detection
Since nextseq is incremented by an extra one byte for SYN/FIN packets,
the out-of-order check should take that into account. Otherwise an
immediately retransmitted SYN or FIN is treated as a retransmission.
Related to #13843.
2022-02-09 02:02:18 +00:00
John Thacker 26dafbae39 file: Fix memory leak in Find Packet
If we don't find the data in a packet, reset the wtap record so
that the block we just searched is freed before we lose our pointer
to it.
2022-02-08 20:03:02 -05:00
Uli Heilmeier 782e7db8c0 PER: Check length calling tvb_new_octet_aligned()
Fix calling tvb_new_octet_aligned() with length == 0

Related to #17890 case 17
2022-02-08 17:19:26 +00:00
Stefan Metzmacher 833a825c7c packet-dcerpc-netlogon: use SEC_CHAN_* values from packet-dcerpc-misc
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2022-02-08 10:45:21 +00:00
Uli Heilmeier 0fd55dbf54 WSCBOR: Add checks for length and NULL
Additional checks for NULL and length before calling
tvb_new_subset_length() or proto_tree_add_item()

Related to #17890 case 8
2022-02-08 10:12:56 +00:00
Martin Mathieson 095255481a Tidy up some masks in items. 2022-02-08 08:56:17 +00:00
Guy Harris 1e27fe59fd Clean up checking for invalid field definitions.
Add comments to indicate what types of display information various field
types are allowed.

Make the error messages for fields that only allow some particular
display information types specific to those types, rather than saying
"no field information allowed".  This also gets rid of some
fallthroughs, one of which allows BASE_PROTOCOL_INFO for floating-point
types, which makes no sense.
2022-02-07 22:01:45 -08:00
Gerald Combs a8c8ee6908 epan: Fix our FT_UINT_BYTES and FT_UINT_STRING checks.
FT_UINT_BYTES and FT_UINT_STRING lengths are always at least the width
of the count bytes. Fix for 1136ce9610 / #17891.
2022-02-08 02:29:50 +00:00
Gerald Combs e93001a8dd BP: Make sure our offset advances.
Fixes #17933.
2022-02-08 02:07:55 +00:00
Gerald Combs 8d3c217779 GDSDB: Make sure our offset advances.
Fixes #17931.
2022-02-08 01:23:28 +00:00
Roland Knall 1e795b3f8c Qt: Fix Packet bytes dialog view
Mac/Linux use a different sorting for the QDialogButtons
2022-02-07 22:03:01 +00:00
Stig Bjørlykke 3c4e4cc134 p_mul: Change display of missing sequence numbers
Show missing sequence numbers with from and to instead of listing
every number in the range as generated fields.

Bonus: explicitly show the range delimiter.

Fixes: #17932
2022-02-07 21:45:15 +00:00
Damir Franusic 027f6a02e8 GDT: add dissector for SCTP PPID 49 protocol 2022-02-07 20:20:43 +00:00
Gerald Combs 2a4171fc06 WAP: Clamp our value lengths to a usable value.
tvb_get_guintvar returns a length which is often used for arithmetic.
Clamp it to a value which is less likely to overflow. Fixes #17925.
2022-02-07 20:06:41 +00:00
Guy Harris 6b3daa9aec ZigBee ZCL: fix the zero-length item check.
The fix for #17926 got the check backwards, so non-empty arrays, sets,
and bags couldn't be dissected, as they'd always report a "zero-length
item" error.  Both versions of the check dissect zero-length items, as
they test for equality, but the old version thought that a
non-zero-length item was also bad, as the offset was greater after
dissecting the item than before dissecting the item.
2022-02-07 11:35:28 -08:00
David Perry 7f820c4a02 More descriptive names for some heuristic dissectors 2022-02-07 18:07:22 +00:00
Roland Knall 81f220ae80 Qt: Fix open explorer
Apparently on Windows, if a dialog contains spaces it is not properly
opened via /select. But opening the file via QDesktopServices leads to
the file not being selected in the open explorer windows (expectation by
the user). Therefore the original change is restored, but with a
differenc call which should handle the space issue in most cases better
than before. See
https://stackoverflow.com/questions/3490336/how-to-reveal-in-finder-or-show-in-explorer-with-qt
for a short explanation (bottom of post)

Fixes #17927
2022-02-07 15:57:59 +00:00
Joakim Karlsson b7babe8ae7 MSRCP: fix build issues [-Werror=maybe-uninitialized] 2022-02-07 14:50:13 +00:00
Stig Bjørlykke e03a590246 json: Handle application/senml+json
Add handling of application/senml+json and application/sensml+json.
2022-02-07 14:33:11 +00:00
Roman Volkov 0a2629f844 mpeg descriptor: add Service Availability Descriptor (0x72) 2022-02-07 14:22:08 +00:00
Martin Mathieson 64c4f74829 RLC-NR: work out a better id/data value for adding fragments. 2022-02-07 14:21:59 +00:00
Stefan Metzmacher 782671a99a Kerberos: handle etype == 0 in dissect_krb5_decrypt_CRED_data()
Within the cKSUMTYPE-GSSAPI (0x8003) BLOB we should not try to decrypt
CRED data if etype 0 is used.

This is used by a Heimdal client as the authenticator is already
encrypted. Windows encrypts it again using the same key that was
used to encrypt the authenticator.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
2022-02-07 13:48:50 +00:00
Stefan Metzmacher b3716be761 Kerberos: Cope with FAST ordering in TGS-REQ PA-DATA
Windows clients use pA-TGS-REQ before pA-FX-FAST, which means
we have a the subkey from the pA-TGS-REQ
AP-REQ/Authenticator before we try to decrypt the
pA-FS-FAST/enc-fast-req.

But a Heimdal client sends pA-FX-FAST before pA-TGS-REQ.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
2022-02-07 13:48:50 +00:00
Stefan Metzmacher ac71f9418a Kerberos: add support for new PAC buffers
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2022-02-07 13:48:50 +00:00
Roland Knall 835d5b3f97 Qt: Allow byteview to be hidden
Implements: #17887
2022-02-07 12:48:18 +00:00
Stig Bjørlykke 6dc92a5fb2 CBOR: Handle application/senml+cbor
Add handling of application/senml+cbor and application/sensml+cbor.

This dissector does not give a good representation of the content
and should be improved.
2022-02-07 12:21:26 +00:00
Roland Knall 5b6bf0b4f3 Qt: Fix show in folder issue
Opening a folder on Windows lead to undesired behaviour

Fixes: #17927
2022-02-07 10:54:38 +01:00
Uli Heilmeier bb8e3db0c6 MIH: Check length tvb_composite_append()
Check if length > 0 before calling tvb_composite_append()

Related to #17890 case 3
2022-02-06 18:18:21 +00:00
Gerald Combs d6fe0b3211 [Automatic update for 2022-02-06]
Update manuf, services enterprise numbers, translations, and other items.
2022-02-06 16:39:45 +00:00
Chuck Craft 8510013135 Prefs/Expert: disable Open Expert Info on Protocol Preferences context menu
Closes #17920
2022-02-06 13:10:08 +00:00
John Thacker fb38fe8573 doc: Document tshark -z stats
Document the currently undocumented -z statistics for tshark. Note
that all the stats added here exist in 3.6 as well. Fix #8353
(at least for now).
2022-02-06 12:48:46 +00:00
Stig Bjørlykke 9a11d75d4d Qt: Add Show as Json in Show Packet Bytes
Show as human readable indented Json.
2022-02-06 10:54:18 +00:00
Jim Young 42106c9688 Docs: Accurately describe our minimum GLib and where to get it 2022-02-06 10:17:25 +00:00
John Thacker 044dd69725 wsutil: Just use g_utf8_validate for now
g_utf8_validate_len doesn't exist until glib 2.60, so just
use g_utf8_validate.  It does the same thing when the length parameter
is unsigned. Fixes CentOS 7.
2022-02-05 22:34:21 -05:00
John Thacker 25d0c88251 epan: Add BASE_SHOW_UTF_8_PRINTABLE
Add BASE_SHOW_UTF_8_PRINTABLE and related function tvb_utf_8_isprint
for supporting fields of bytes that are "maybe UTF-8" (default or
SHOULD be UTF-8 but could be something else, with no encoding indicator),
such as SSID fields in IEEE 802.11 (See #16208), certain OctetString
fields in Diameter or PFCP, and other places where
BASE_SHOW_ASCII_PRINTABLE is currently used. Fix #5307
2022-02-06 00:32:13 +00:00