Commit Graph

38 Commits

Author SHA1 Message Date
Guy Harris 024e6cf1e7 added fastip (Boundary) enterprise ID
From

    commit f8e7530fbef3b969facca42929f0fe6c8e1fd6bd
    Author: Brent Cook <brent@boundary.com>
    Date:   Fri Apr 19 10:02:09 2013 -0500

        added fastip (Boundary) enterprise ID

in https://github.com/boundary/wireshark.

Change-Id: I8afdb1ce1d96e194140175c63d66dcc7df46bbdf
Reviewed-on: https://code.wireshark.org/review/36673
Reviewed-by: Guy Harris <gharris@sonic.net>
2020-04-03 06:50:15 +00:00
Andreas Schultz 4f776cb70e PFCP: add Travelping's vendor IEs
Change-Id: Idcddc4e1388c5d31596690e997997b05a178702b
Reviewed-on: https://code.wireshark.org/review/33693
Petri-Dish: Anders Broman <a.broman58@gmail.com>
Tested-by: Petri Dish Buildbot
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-03-31 11:26:52 +00:00
Volodymyr Veskera bfeb46b1cf Netflow: Add decodes for Niagara Networks IPFIX information elements.
Change-Id: I2775bfb7d86a9c2dc257cf4d7a5bc2b6f9e68f35
Reviewed-on: https://code.wireshark.org/review/33851
Petri-Dish: Anders Broman <a.broman58@gmail.com>
Tested-by: Petri Dish Buildbot
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2019-07-08 11:40:44 +00:00
Jeremy Browne ba6c8f08ac epan: Trivial constant sort order fix - sminmpec.h
Change-Id: I890a273dcc732551a9cb6ce4288efbb552c89576
Reviewed-on: https://code.wireshark.org/review/27062
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-04-21 06:10:35 +00:00
Dario Lombardo 55c68ee69c epan: use SPDX indentifiers.
Skipping dissectors dir for now.

Change-Id: I717b66bfbc7cc81b83f8c2cbc011fcad643796aa
Reviewed-on: https://code.wireshark.org/review/25694
Petri-Dish: Dario Lombardo <lomato@gmail.com>
Tested-by: Petri Dish Buildbot
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-02-08 19:29:45 +00:00
João Valverde 7466880e8a Parse enterprise-numbers at run time
"enterprise-numbers" is converted to tab-separated values and renamed
"enterprises". Unused fields are stripped.

PENs are stored in a hash table loaded at run-time.

User "enterprises" file is loaded from the personal config dir.

Misc make-sminmpec.pl improvements and fixes.
Note: names of type "Entity (formerly ...)" have the formerly part commented out for a cleaner output.

Change-Id: I60c533afbe3e399077fbf432088064471ad3e1e2
Reviewed-on: https://code.wireshark.org/review/22246
Petri-Dish: João Valverde <j@v6e.pt>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Peter Wu <peter@lekensteyn.nl>
Reviewed-by: João Valverde <j@v6e.pt>
2017-06-26 22:40:50 +00:00
Andrew Feren e2bd5314d0 Add decodes for Gigamon IPFIX information elements
-- Elements to be decoded described in IE-doctor format (RFC 7013 section 10)
httprequrl(26866/1)<string>
httprspstatus(26866/2)<unsigned16>{identifier}
sslcertificateissuercommonname(26866/101)<string>
sslcertificatesubjectcommonname(26866/102)<string>
sslcertificateissuer(26866/103)<string>
sslcertificatesubject(26866/104)<string>
sslcertificatevalidnotbefore(26866/105)<string>
sslcertificatevalidnotafter(26866/106)<string>
sslcetificateserialnumber(26866/107)<octetArray>
sslcertificatesignaturealgorithm(26866/108)<octetArray>
sslcertificatesubjectpubalgorithm(26866/109)<octetArray>
sslcertificatesubjectpubkeysize(26866/110)<unsigned16>
sslcertificatesubjectaltname(26866/111)<string>
sslservernameindication(26866/112)<string>
sslserverversion(26866/113)<unsigned16>
sslservercipher(26866/114)<unsigned16>
sslservercompressionmethod(26866/115)<unsigned8>
sslserversessionid(26866/116)<octetArray>
dnsidentifier(26866/201)<unsigned16>{identifier}
dnsopcode(26866/202)<unsigned8>{identifier}
dnsresponsecode(26866/203)<unsigned8>{identifier}
dnsqueryname(26866/204)<string>
dnsresponsename(26866/205)<string>
dnsresponsettl(26866/206)<unsigned32>
dnsresponseipv4address(26866/207)<ipv4Address>
dnsresponseipv6address(26866/208)<ipv6Address>
dnsbits(26866/209)<string>
dnsqdcount(26866/210)<unsigned16>
dnsancount(26866/211)<unsigned16>
dnsnscount(26866/212)<unsigned16>
dnsarcount(26866/213)<unsigned16>
dnsquerytype(26866/214)<unsigned16>
dnsqueryclass(26866/215)<unsigned16>
dnsresponsetype(26866/216)<unsigned16>
dnsresponseclass(26866/217)<unsigned16>
dnsresponserdlength(26866/218)<unsigned16>
dnsresponserdata(26866/219)<string>
dnsauthorityname(26866/220)<string>
dnsauthoritytype(26866/221)<unsigned16>
dnsauthorityclass(26866/222)<unsigned16>
dnsauthorityttl(26866/223)<unsigned32>
dnsauthorityrdlength(26866/224)<unsigned16>
dnsauthorityrdata(26866/225)<string>
dnsadditionalname(26866/226)<string>
dnsadditionaltype(26866/227)<unsigned16>
dnsadditionalclass(26866/228)<unsigned16>
dnsadditionalttl(26866/229)<unsigned32>
dnsadditionalrdlength(26866/230)<unsigned16>
dnsadditionalrdata(26866/231)<string>

Bug: 13688
Change-Id: I4a2472d9bb86d195851edd3a1f5e688ba31dde89
Reviewed-on: https://code.wireshark.org/review/21519
Petri-Dish: Michael Mann <mmann78@netscape.net>
Reviewed-by: Martin Mathieson <martin.r.mathieson@googlemail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-05-06 02:30:05 +00:00
AndersBroman 980a0a300a Add define for vendor dacom
Change-Id: Ie7411d4d41e3f0a0ea98ed4a14d40c5715535c8a
Reviewed-on: https://code.wireshark.org/review/17815
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2016-09-20 11:46:21 +00:00
AndersBroman 8a0b7ccb5a Add a couple of vendor defines.
Change-Id: I252b4f892a539c7fa585615ef636fc26de356bf7
Reviewed-on: https://code.wireshark.org/review/16055
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2016-06-21 13:21:47 +00:00
Uli Heilmeier 77994838a4 L2TP: Added AVPs from RFC 5515
Basic dissection of AVPs from RFC 5515.

Ping-Bug: 12208
Change-Id: Ie16073378a66a81f8378eab7a83988ef9e8a5c88
Reviewed-on: https://code.wireshark.org/review/14246
Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
2016-03-01 08:07:05 +00:00
Uli Heilmeier d8e1e18d5e Netflow/Ipfix: Add Barracuda NGFirewall
Add support for Barracuda NGFirewall Ipfix Audit. Used documentation
found at https://techlib.barracuda.com/NG61/ConfigAuditReportingIPFIX

The configuration allows to switch between little endian and big
endian for a Ipfix collector. This commit expects big endian encoding.

However it seems that there is a bug in NGFirewall 6.1.1 which
interchanges the encoding (little-endian instead of big endian and vice
versa).

Bug: 11902
Change-Id: I84c497188eadedf6781dce309888242b0dc1592f
Reviewed-on: https://code.wireshark.org/review/12703
Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
2015-12-21 09:17:38 +00:00
Uli Heilmeier ef7e4c52f2 Netflow/Ipfix: Add Citrix Netscaler AppFlow
This commit adds dissection of Citrix Ntscaler Appflow
templates to Netflow/Ipfix.

The documenation for the templates was found at:
https://raw.githubusercontent.com/splunk/ipfix/master/app/Splunk_TA_IPFIX/bin/IPFIX/information-elements/5951.xml

Due to non-disclosure I can't provide any sample pcap.

Change-Id: I1d34ad4298a51c71986bc8565cc5f3802b0df3c2
Reviewed-on: https://code.wireshark.org/review/7740
Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
2015-03-19 14:27:24 +00:00
Alexis La Goutte 6824cee6c4 CAPWAP: Add support of Cisco Vendor Specific Element
Change-Id: I62886bda3220d9aa3a5b3aee8b40063a8bb7745d
Reviewed-on: https://code.wireshark.org/review/6843
Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
2015-01-30 03:09:11 +00:00
Alexis La Goutte bab744784f CAPWAP: Add support of Fortinet Vendor Specific Element
Based from FortiAP/WiFi 5.2.x

Change-Id: Ia78d15d54db01939a3d91947db39e35b3abc2519
Reviewed-on: https://code.wireshark.org/review/5646
Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com>
Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2015-01-23 12:26:12 +00:00
Martin Mathieson f39366bb12 NetFlow: Add Ixia 'IxFlow' fields and make some general usability improvements
- Sequence number analysis using flow sequence within an observation domain.
- Link back from data set to template frame, if have seen
- Show more information (observation domain ID, set ID, etc) in Info column and protocol roots
- Look up protocol field from ip_proto

Change-Id: I3147387a3cd0d1fc33b879b3ba226753ed2cd8dd
Reviewed-on: https://code.wireshark.org/review/6331
Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
2015-01-06 20:17:23 +00:00
Alexis La Goutte 296591399f Remove all $Id$ from top of file
(Using sed : sed -i '/^ \* \$Id\$/,+1 d')

Fix manually some typo (in export_object_dicom.c and crc16-plain.c)

Change-Id: I4c1ae68d1c4afeace8cb195b53c715cf9e1227a8
Reviewed-on: https://code.wireshark.org/review/497
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2014-03-04 14:27:33 +00:00
Anders Broman e1f2565570 Change name on a define.
svn path=/trunk/; revision=48884
2013-04-16 18:12:56 +00:00
Anders Broman 8e1b0ac304 Register a dissector table for Normal Vendor/Organization Specific Extension(NVSE) and use it for 3GPP2.
svn path=/trunk/; revision=48623
2013-03-28 16:55:06 +00:00
Balint Reczey 1ebdb2e521 Export libwireshark symbols using WS_DLL_PUBLIC define
Also remove old WS_VAR_IMPORT define and related Makefile magic
everywhere in the project.

svn path=/trunk/; revision=47992
2013-03-01 23:53:11 +00:00
Bill Meier 1f4d7cb6a7 Convert '4 space tabs' to spaces;
svn path=/trunk/; revision=46467
2012-12-08 20:49:51 +00:00
Jakub Zawadzki bf81b42e1e Update Free Software Foundation address.
(COPYING will be updated in next commit)

svn path=/trunk/; revision=43536
2012-06-28 22:56:06 +00:00
Anders Broman d7277e2230 Add VENDOR_ERICSSON_PKT_CORE
svn path=/trunk/; revision=41103
2012-02-21 08:58:05 +00:00
Anders Broman d887821ef6 #define VENDOR_AT_AND_T 74
svn path=/trunk/; revision=40636
2012-01-21 21:59:37 +00:00
Jeff Morriss 2993d4aa54 From Andrew Feren via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5377 :
Add a bunch of NetFlow/IPFIX extensions from Plixer and ntop.

A little cleanup as well.

From me: remove duplicate blurbs.

svn path=/trunk/; revision=35142
2010-12-07 03:46:10 +00:00
Bill Meier 123347da00 (Trivial) Whitespace cleanup.
svn path=/trunk/; revision=34217
2010-09-23 18:16:26 +00:00
Bill Meier 7219ee2a49 Use val_to_str_ext() & friends to access sminmpec_values[];
Also: packet-nhrp.c: #include sminmpec.h not req'd;

svn path=/trunk/; revision=34143
2010-09-17 04:51:21 +00:00
Anders Broman 8f5b2d749b Define VENDOR_VERIZON in sminmpec.h
svn path=/trunk/; revision=31853
2010-02-10 07:21:51 +00:00
Gerald Combs 9a72434b1e Add support for process flow records to IPFIX, which required adding
support for vendor-specific IEs. Fix variable-length record handling. Add
conversation tracking to the UDP dissector and add process flow
information to TCP and UDP conversations.

This lets us run process flow collectors on one or more machines and
have the process username, PID, command name, etc. show up in the TCP
and UDP protocol trees.

svn path=/trunk/; revision=28366
2009-05-14 23:33:17 +00:00
Luis Ontanon 7f44084042 From Boris Misenov
sminmpec_values array is marked as just "export" instead of "WS_VAR_IMPORT" in
epan/sminmpec.h. This prevents its using in Windows builds of plugins directly.


svn path=/trunk/; revision=20720
2007-02-05 16:26:48 +00:00
Ronnie Sahlberg 89f022b12b name change
svn path=/trunk/; revision=18197
2006-05-21 05:12:17 +00:00
Anders Broman 5cea18c3e2 Add some more vendors
svn path=/trunk/; revision=14672
2005-06-16 22:06:12 +00:00
Anders Broman 3e85231160 Add Vendor ID of T-Mobile and T-Systems Nova International GmbH.
svn path=/trunk/; revision=14628
2005-06-14 21:45:29 +00:00
Luis Ontanon 8b481b2ab9 From Florian Lohoff:
Add Netscreen vendor specific attributes


svn path=/trunk/; revision=13650
2005-03-07 11:35:52 +00:00
Guy Harris 7b49d981ae From Deepak Jain: L2TP v3 (draft 15) support.
Add VENDOR_IETF to <epan/sminmpec.h>, and add an entry for it to
sminmpec_values[], so that the L2TP dissector can use them rather than
defining its own copy of the private enterprise number values and table
- and make it do so.

svn path=/trunk/; revision=12999
2005-01-09 21:42:39 +00:00
Anders Broman bfe94108dd Change "Ericsson" string
svn path=/trunk/; revision=12594
2004-11-24 12:23:26 +00:00
Gerald Combs cb6193c1e9 Add support for the PacketCable Event Message Specification
(PKT-SP-EM-I09-040402).  Code contributed by CableLabs.


svn path=/trunk/; revision=12195
2004-10-04 20:13:35 +00:00
Guy Harris 8d24ff694a From Kestutis Kupciunas: add new vendor enterprise codes for Gemtek
Systems and the Wi-Fi Alliance, and add Radius vendor-specific
attributes for them.

svn path=/trunk/; revision=12164
2004-10-01 07:01:53 +00:00
Guy Harris 915ebf2ca3 Move the #defines for SMI Network Management Private Enterprise Codes
for organizations to an <epan/sminmpec.h> header, and add in the ones
that were used (without #defines) in the Diameter dissector.

Merge the value_string tables for them from the Diameter and Radius
dissectors into epan/sminmpec.c and merge them.

Use that value_string table in the Diameter and Radius dissectors.

Constify some stuff in the Diameter dissector.

svn path=/trunk/; revision=12159
2004-09-30 20:27:47 +00:00