Commit Graph

81392 Commits

Author SHA1 Message Date
David Perry 73087d6fb4 Use wtap_blocks for packet comments
Mostly functioning proof of concept for #14329. This work is intended to
allow Wireshark to support multiple packet comments per packet.

Uses and expands upon the `wtap_block` API in `wiretap/wtap_opttypes.h`.
It attaches a `wtap_block` structure to `wtap_rec` in place of its
current `opt_comment` and `packet_verdict` members to hold OPT_COMMENT
and OPT_PKT_VERDICT option values.
2021-07-07 18:40:24 +00:00
Pascal Quantin 20f38c06ea LPP: upgrade dissector to v16.5.0 2021-07-07 18:09:24 +00:00
Pascal Quantin 204642089a NR RRC: upgrade dissector to v16.5.0 2021-07-07 17:37:07 +00:00
Andreas Schultz 4992806dba GTPv2: fix decoding of (extended) eNodeB id
3GPP TS 29.274, clause 8.21.7 and 8.21.8 clearly specify a total
length of 6 bytes for these fields.
2021-07-07 17:20:01 +00:00
Pascal Quantin ce9b01f059 LTE RRC: upgrade dissector to v16.5.0 2021-07-07 17:34:28 +02:00
Pascal Quantin 1c3739c360 NGAP: fix dissection of gNB/ng-eNB transparent container 2021-07-07 14:27:58 +00:00
Nardi Ivan c2d77d910d QUIC: improve "Follow QUIC Stream" support
This functionality has been added in d2a660d8, where its limitations
are described.
Improvements:
* the Substream index menu now properly filters for available stream numbers;
* Follow Stream selects the first stream in the current packet

Known issue (which is still there):  if a packet contains multiple QUIC
streams, then we will show data also from streams other than the selected
one (see #16093)

Note that there is no way to follow a QUIC connection.

Close #17453
2021-07-07 13:08:19 +00:00
Nardi Ivan a6932f56dc wmem: add a GCompareFunc implementation to compare unsigned integer 64 bits long 2021-07-07 13:08:19 +00:00
David Perry 8dc1660ef8 Fix compiler warning in packet-json.c
Clang gives a fatal warning about "explicitly assigning value of
variable of type 'int' to itself". The statement (and the `if` around
it) are redundant, so this removes both.
2021-07-07 06:48:41 -04:00
Martin Mathieson f9db3ef394 ORAN FH CUS: Fix some field widths
Some fields were articially grouped together
into longer types, with masks that had leading
or trailing zero bytes.
2021-07-07 09:29:52 +00:00
Martin Mathieson 3dd7ba03fa tools/check_typed_item_calls.py: Add extra mask checks 2021-07-07 10:00:45 +01:00
Developer Alexander 8a630ad6d0 json: improved path based filtering
It is the intention to enable more precise filtering for json. 6 changes were
made for this:

- 'json.member' becomes filterable as a string field with the key of the
member. Before the key was only appended as text but was not filterable.

- Every item gets a field 'path' which allows to filter for elments
which are at a specific position within the json. To make anonymous arrays
visible (no member key) they appear as '[]' in the path. (For example arrays
 in arrays)

- Every string, number, true, false, true or null item gets a field
'path_with_value' which combines the path of this element with its value. This
allows a filtering for values of elements at a specific position within the
json.

- Every string, number, true, false, true or null item gets a field
'member_with_value' which combines the key of this element with its value. This
allows a filtering for specific key-values-pairs independently of the position
within the json.

-It is possible to hide 'path', 'path_with_value', 'member_with_value' by
a preference called 'Hide extended path based filtering'.

- If the provided buffer does not start with the json object but has some
leading bytes which does not belong to the json object there is a new option to
ignore these bytes. This behaviour can be enabled by the newly introduced
preference 'Ignore leading non JSON bytes'.
2021-07-06 19:16:29 +00:00
Martin Mathieson 43077b96e8 Fix a few dissector spelling errors. 2021-07-06 07:52:21 +00:00
Gerald Combs d3f8754874 Win32: Fix a couple of Coverity warnings.
Fix

838             elapsed_time = (unsigned int)(stats.stop_time-stats.start_time);
839             if(status == PREVIEW_TIMED_OUT) {
>>>     CID 1486835:  Control flow issues  (DEADCODE)
>>>     Execution cannot reach this statement: "StringCchPrintfW(string_buf...".

and

909             /* Default window background */
910             SendMessage(hwnd, EM_SETBKGNDCOLOR, (WPARAM) 1, COLOR_WINDOW);
>>>     CID 1486836:  Resource leaks  (RESOURCE_LEAK)
>>>     Variable "strval" going out of scope leaks the storage it points to.
2021-07-06 07:32:31 +00:00
Martin Mathieson 06e7426efb ORAN FS CUS: Factor out a couple of common functions
Types that are common to section extension types
1 and 11.
2021-07-06 05:49:22 +00:00
Shubham jha 41deb9dd9b Improved PIM dissector with capability to parse multiple TLVs and additional attribute types 2021-07-06 05:48:47 +00:00
Anders Broman 2270056073 Revert "Wirehark Windows: Harden build with Shadow Stack and EHCONT metadata"
This reverts commit ebb8703a50.
2021-07-05 15:48:48 +02:00
Anders Broman 14f6769280 Diameter:Update some AVPs and enums. 2021-07-05 12:17:27 +00:00
Martin Mathieson c5f52508e1 Voip calls: avoid leaking seq analysis item
CID 1477861
2021-07-05 09:38:44 +01:00
Andre Luyer 9f8e6b1acb tshark/wireshark: Fix check ring buffer option for packets
tshark and wireshark did not allow only -b packets:value option, while dumpcap does.
This change adds the same check in tshark and wireshark as in dumpcap.

Quick fix for issue mentioned at https://ask.wireshark.org/question/23437/why-does-tshark-b-packetsvalue-not-work/
2021-07-04 19:55:59 +00:00
Gerald Combs d170dff7eb [Automatic update for 2021-07-04]
Update manuf, services enterprise numbers, translations, and other items.
2021-07-04 15:55:26 +00:00
João Valverde 100876337a Move version_info.[ch] to ui/
Version info is an aspect of UI implementation so move it to
a more appropriate place, such as ui/. This also helps declutter
the top-level.

A static library is appropriate to encapsulate the dependencies
as private and it is better supported by CMake than object libraries.

Also version_info.h should not be installed as a public header.
2021-07-04 10:37:49 +00:00
João Valverde 47d2afd990 sharkd: Prefer version_info.h instead of version.h 2021-07-04 10:37:49 +00:00
João Valverde 3a3fda2ca4 epan: Remove dependency on version_info object library
Dependending on version_info is unnecessary and forces an epan
rebuild every time the git commit id changes, which can be slow,
especially with LTO enabled, and again is unnecessary.

Printing the VCS version to the TLS debug log is a minor convenience
that doesn't justify the cost to relink epan with every commit.
2021-07-04 10:37:49 +00:00
Pascal Quantin aa5df68171 NR RRC: fix dissection of MeasTriggerQuantityOffset element 2021-07-04 12:03:45 +02:00
Dr. Lars Völker f54efc5608 TECMP: Making IDs for CAN, FlexRay, LIN HEX_DEC
This patch changes the display from HEX to HEX_DEC of important IDs.
2021-07-03 14:46:10 +00:00
Prince Paul 30058542e9 ASTERIX: Fix Data Item 010/091
Fixed Item Number from 110 to 091
2021-07-03 14:29:38 +00:00
Martin Mathieson 9512524ef8 ORAN FH CUS: Fix/update existing supported section extensions 2021-07-02 18:17:08 +01:00
Prince Paul 79f62acbe7 ASTERIX: Fix Value of hf_010_202_VY from VX to VY
Fix typo VX to VY
2021-07-02 11:13:24 +00:00
Pascal Quantin 8f69254638 E1AP: upgrade dissector to v16.6.0 2021-07-02 10:57:29 +00:00
Isaac Boukris 5f8a932338 kerberos: fix compilation without kerberos
regressed_by: 38810b76

Reported-By: @crondaemon <Dario Lombardo>.
2021-07-02 10:32:18 +00:00
Pascal Quantin 498f5bf7d1 F1AP: upgrade dissector to v16.6.0 2021-07-02 10:10:23 +00:00
Pascal Quantin 95bc8cf328 XnAP: upgrade dissector to v16.6.0 2021-07-02 09:35:09 +00:00
Pascal Quantin e1b31629d7 NGAP: upgrade dissector to v16.6.0 2021-07-02 09:19:34 +00:00
Pascal Quantin 6dcb6568ff S1AP: upgrade dissector to v16.6.0 2021-07-02 09:02:58 +00:00
Pascal Quantin b403255234 X2AP: upgrade dissector to v16.6.0 2021-07-02 08:46:29 +00:00
Isaac Boukris 80c57b3d0b Kerberos: add basic dissection of PAC_TICKET_CHECKSUM
per recent MS-PAC update.
2021-07-02 08:18:57 +00:00
Gerald Combs 0bc39aa2eb Win32: Compile ui/win32 as C++.
We always build the .c files in ui/win32 with Visual C++, so rename
them to .cpp and update CMakeLists.txt to match. Leave the C code mostly
intact for now, but this lets us take advantage of C++ features in the
future if desired.
2021-07-02 08:02:38 +00:00
Dr. Lars Völker cc2f5825df Signal PDU: Adding config option to unhide raw values
This patch lets the user configure, if the header field for the
raw value is hidden or not.

Default configuration has the behavior as before.
2021-07-02 07:47:48 +00:00
Taisuke Sasaki d8ee53e078 OSPF: Fixed SRLB and SRMS Preference TLV types (rfc8665)
- Fixed TLV types of SRLB and SRMS Preference
- Added type/length for unknown Opaque RI TLV
2021-07-02 07:32:53 +00:00
Dr. Lars Völker 71882f8304 Signal PDU: UAT checks and descriptions
This patch cleans up the naming and description of the configuration.
2021-07-02 07:17:20 +00:00
Nardi Ivan ac49b5aff3 TLS: improve support for "delegated_credentials" extension
Client support was added in bd597dc247.
Now, add decoding of the messages sent by the server.

See: https://www.ietf.org/archive/id/draft-ietf-tls-subcerts-10.txt
2021-07-02 06:29:17 +00:00
Dr. Lars Völker 180063997f Signal PDU: Adding hex display for raw uint values
It is a common use case to look at the signal raw values in hex.
This patch adds this for uint based values. Since the length of
the signal is not necessary 8, 16, 32, or 64 bit, this is done via
append_text.
2021-07-02 06:12:46 +00:00
Graham Bloice 1ca1473de8 DNP3: Add Octet string length to item text
The Octet string is an outlier amongst DNP3 objects as the variation
doesn't define a specific type of string but the length.

Presiously the length was not displayed in the packet details,
this change adds the length to the object header.
2021-07-01 18:55:35 +01:00
Martin Mathieson b8a489e2e3 ORAN FH CUS: Special meaning of numPrbu 2021-07-01 16:52:25 +00:00
Isaac Boukris d833f5c061 krb5: use all_keys to verify PAC server signature to allow U2U
As a U2U ticket can't always be distinguished from a normal ticket,
e.g. in TGS-REP. Revert the old fix which didn't work for that case.
2021-07-01 14:25:02 +00:00
Guy Harris 5f596c1e82 wiretap: add the ZigBee secret types.
They're in the spec, they belong here as well.
2021-07-01 11:09:36 +00:00
Developer Alexander 09746068a9 websocket: decode as for tcp port
Make websocket dissector available for decode as for tcp port.
2021-07-01 10:52:12 +00:00
Dario Lombardo 481b0ee06c ospf: ensure a sub-tlv has a valid length before using it.
A sub-tlv has a 2-bytes type and a 2-bytes length, that includes
the stlv header. For this reason the full length of a stlv must be
over 4. This must be checked before converting the payload to a
string by subtracting 4 to the length.

Fix: #17459.
2021-07-01 10:20:48 +00:00
Dario Lombardo c0e70f67b3 tvbuff: add a DISSECTOR_ASSERT to tvb_bytes_to_str.
It has been added since its length is signed, while the underlying
bytes_to_str uses a size_t, causing an unwanted cast. Basically
passing a len < 0 is pointless.
2021-07-01 10:20:48 +00:00