Commit Graph

86484 Commits

Author SHA1 Message Date
Kevin Albertson 95a1627064 note need to free return in uncompress functions 2023-01-10 01:34:44 +00:00
Kevin Albertson 988d4585bc ipsec: fix comment 2023-01-10 01:34:44 +00:00
Kevin Albertson 005ea28d27 sip: fix leak in uncompress 2023-01-10 01:34:44 +00:00
Kevin Albertson 0150297d55 rtps: fix leak in uncompress 2023-01-10 01:34:44 +00:00
Kevin Albertson 01fda90a45 mcpe: fix leak in uncompress 2023-01-10 01:34:44 +00:00
Kevin Albertson 39ee45a069 multipart: fix leak in uncompress 2023-01-10 01:34:44 +00:00
Kevin Albertson 8461440f4a gelf: fix leak in uncompress 2023-01-10 01:34:44 +00:00
Kevin Albertson f7290f2cb6 mysql: fix leak in uncompress 2023-01-10 01:34:44 +00:00
Sergey V. Lobanov e80b2ab560 ALP: add decoders for Link Mapping Table (LMT) and Sony header extensions
LMT decoder is implemented according to A/330:2022-03.
.pcap sample: https://wiki.wireshark.org/SampleCaptures#alp-protocol

Sony header extensions are not documented publicly, but implemented in libatsc3.
This implementation is based on libatsc3 (src/test_sony/atsc3_sony_ts_alp_reader_reflector_test.c)
Libatsc3 home: https://github.com/jjustman/libatsc3
Use cases for sony extenstions can be found in: https://www.sony.com/content/dam/sony/landing-pages/whitepaper-atsc30_automotive_field_tests_.pdf
.pcap samples: https://wiki.wireshark.org/SampleCaptures#alp-protocol
2023-01-09 22:21:41 +00:00
PMcL 1fc516739e mako: Updated Metamako trailer dissection
packet-metamako.c: Made heuristic variables available for the user to change via the UI, updated the display strings of the Clause 49 BTF value and the Original FCS status, simplified the heuristic function, added UI options to force trailer dissection (override heuristics), and allow for user specification of whether an FCS is present in the capture, fixed TLV walking bug if the heuristic picks up an invalid TLV length, appends the Info column with a message if the trailer is found, added a generated timestamp field to display the epoch seconds, added total-frame FCS display if total-frame FCS is detected, along with its status.
2023-01-09 20:08:02 +00:00
Gerald Combs 4d38cf9ec6 FAQ: Fix some markup 2023-01-09 18:00:11 +00:00
Joakim Karlsson 56deed1c15 GTPv2: correction of IE MM Context EPS QQ 2023-01-09 15:50:42 +01:00
Joris Peeraer fadb420769 PFCP: remove empty wrappers around dissect_pfcp_grouped_ie
By simplifying the dissect_pfcp_grouped_ie calls, some dissector
functions have become a simple wrapper to dissect_pfcp_grouped_ie
with even the same arguments.

These functions are removed and the dissect_pfcp_grouped_ie function is
used directly where references to these old functions were used
previsouly.
2023-01-09 10:28:39 +01:00
Joris Peeraer b5fc7ff3bc PFCP: get rid of forward declarations by moving ie-decoder-table down
Part of cleanup that will ease refactorings in later commits.
Remove all forward declarations and move the table containing references
to those functions down.
2023-01-09 10:28:35 +01:00
Joris Peeraer bf071e39d9 PFCP: remove redundant sub-tree and sub-tvb
The dissector-code for grouped IEs creates a subtree while it already
received a subtree for the ett being used. This redundant subtree
creation is removed.

The same happens with creating a tvb: the function creates a new tvb
while it already is passed in the appropriate tvb.
2023-01-09 10:28:08 +01:00
Kevin Albertson e8cd0d1457 http2: fix leak of composite 2023-01-09 08:04:08 +00:00
Kevin Albertson a0c9627502 wscbor: defer creation of composite tvb
Prevents an exception in finalize if no tvbs are appended.
2023-01-09 08:04:08 +00:00
Alexis La Goutte 1a1a6ce12b DNS: Modify dns.qry.type for using without description
and append field with description

Close #18704
2023-01-09 06:54:07 +00:00
João Valverde 613331f07b dfilter: Disable flex debug trace for release builds
This omits the flex debug code in the binary if the build type is
RelMinSize or Release.

It replaces the "%option debug" stanza with the -d command line
option, to be able to configure the flex behaviour.
2023-01-09 04:03:19 +00:00
João Valverde 65ce33b5d7 dftest: Add wslog usage 2023-01-09 04:03:19 +00:00
João Valverde 067bf04446 dftest: Add a newline to output 2023-01-09 04:03:19 +00:00
Gerald Combs 4ec08045aa wslua: Fix wsluarm defines. 2023-01-09 03:17:30 +00:00
Gerald Combs 0f824b8b34 [Automatic update for 2023-01-08]
Update manuf, services enterprise numbers, translations, and other items.

services failed.
2023-01-09 03:16:38 +00:00
Guy Harris 03cb1cb077 macos-setup: go with the current autoconf and automake releases.
(Too bad we have to install these to get a decent Makefile for minizip.)

[skip ci]
2023-01-08 15:17:15 -08:00
João Valverde b72bc8408b dftest: Enable debug log level with -l or -f 2023-01-08 19:18:29 +00:00
João Valverde 9d7b461a16 dftest: Add -0 option (no optimization) 2023-01-08 19:18:29 +00:00
Sergey V. Lobanov ff7bab1730 ALP: add dissector for ALP protocol (ATSC3.0 A/330)
This is a port of SiliconDust ALP decoder provided in public repository
https://github.com/silicondust/wireshark

Original Author: Nick Kelsey <nickk@silicondust.com>
2023-01-08 16:09:47 +00:00
João Valverde 840a0d3025 dfilter: Display layer in DFVM dump string 2023-01-08 15:10:43 +00:00
Ferry Huberts 4dedbe3eb4 locamation-im: fix a Coverity warning
Signed-off-by: Ferry Huberts <ferry.huberts@pelagic.nl>
2023-01-08 09:08:23 +00:00
João Valverde de286af6ec ZDP: Sanitize UTF-8 string
Fixes #18772
2023-01-07 22:43:49 +00:00
João Valverde fcf97be1e9 dftest: Move a newline insertion
We want the string to not end with a new line for logging purposes
but add the final new line when printing to a file stream.
2023-01-07 22:28:01 +00:00
João Valverde 46d58f97cc dfilter: Add a test 2023-01-07 21:21:36 +00:00
João Valverde 4d3f580961 tests: Reorganize dfilter group 2023-01-07 21:21:36 +00:00
João Valverde 1861679e81 dfilter: Optimize some scanner patterns
Cleanup flex code. Optimize some patterns to avoid lookups
for field matches for values that are not legal field names.

Improve warning and add some comments.
2023-01-07 21:15:25 +00:00
João Valverde 7641ba7416 dftest: More code cleanups and enhancements 2023-01-07 19:16:16 +00:00
John Thacker 0c24b0ae72 Qt: Remove duplicate column reset and cache invalidation
The filterPackets method calls file.c/cf_filter_packets,
which calls rescan_packets, which sends signals when done that
eventually calls the PacketList::captureFileReadFinished

PacketList::captureFileReadFinished invalidates all the column
strings after the rescan may have updated their information
(e.g., delta time to previous displayed packet), so it is not
necessary to reset the column strings a second time explicitly
in filterPackets.

Commit 38cde83a5c added the reset
to filterPackets, but commit bbe5fc1028
added the invalidateAllColumnStrings to captureFileReadFinished
that made the prior commit unnecessary.
2023-01-07 09:05:17 -05:00
John Thacker da3a48f820 Qt: Add a pref for column text caching, and have it affect sorting
Introduce a preference for the number of rows whose column text can
be cached, and allow sorting of the packet list only when the
number of displayed rows can fit in the cache. This preference only has
an effect for sorting based on columns that require dissection and
caching the column text. This reduces the number of dissections from
O(N log N) to N. Subsequent sorts are even faster.

Columns based on frame data are unaffected, as they sort much faster
as dissection is not required.

Set the size of the QCache introduced in 8c6854fb65 based
on this preference.

Send a temporary status message to the status bar if we try to sort
but there are too many rows, explaining why sorting did not happen and
that the layout preferences can be changed.

Ping #18741
2023-01-07 13:20:24 +00:00
Rubin Gerritsen 751d836123 btle: Add control proc enum to make code self-documenting
Previously hardcoded integers were used in control procedure
dissection. This resulted in hard to read code.

Signed-off-by: Rubin Gerritsen <rubin.gerritsen@nordicsemi.no>
2023-01-07 08:30:14 +00:00
Rubin Gerritsen b857c3189a btle: Dissector name updated to 5.3
It is dissecting 5.3, so it makes sense the name is updated

Signed-off-by: Rubin Gerritsen <rubin.gerritsen@nordicsemi.no>
2023-01-07 08:30:14 +00:00
Rubin Gerritsen 08d78fddb3 btle: Add some braces to if statements
As suggested in merge request 9233.

Signed-off-by: Rubin Gerritsen <rubin.gerritsen@nordicsemi.no>
2023-01-07 08:30:14 +00:00
Rubin Gerritsen 0627ece136 btle: Fix bitmask for 5.3 feature sets
These were incorrectly set in
8f747e41c9

Signed-off-by: Rubin Gerritsen <rubin.gerritsen@nordicsemi.no>
2023-01-07 08:30:14 +00:00
Sake Blok 16cc10efb6 TCP: fix tcp stream numbering
With TCP Sequence Number Analysis disabled, a new TCP conversation
with the same 5-tuple (reused ports) was not properly recognized
as the base_seq was only set with the preference enabled.
2023-01-06 23:20:26 +00:00
Sake Blok f870c6085d epan: Allow nested dependent packets
Save all dependent frames when there are multiple levels
of reassembly.

This is a retry of !6329, combined with the fix in !6509 which
were reverted in !6545.

epan: fix a segfault, introduced in !6329
2023-01-06 23:15:48 +00:00
Gerald Combs 693dc40936 GNW: Ensure that tvbuff proto data has the proper scope.
Add security tvbuffs to our proto data using pinfo->pool.
Fixes #18779.
2023-01-06 17:37:37 +00:00
Alexis La Goutte 99385f1644 isup: fix typo on cause indicator
Internetworking -> Interworking

Close #18780
2023-01-06 13:23:23 +00:00
Martin Mathieson b388a23107 Revert much of 9281 (convert vals to common tfs).
Is not appropriate when there is no bitmask, because any
(even even) value is treated as true.
2023-01-06 10:39:46 +00:00
João Valverde a2b23f5a09 dfilter: Fix DFVM function debug output
Add a NULL check. Add missing newlines.

Remove explicit display of number of input arguments.
2023-01-06 02:52:04 +00:00
João Valverde df30299aff dftest: Add -h and improve output format
Experiment with removing the type from the instruction output.

This information is also available with the -s option flag.

Rename -t to -s.
2023-01-06 01:43:42 +00:00
João Valverde e77d716411 dfilter: Print CIDR mask for IPv4/IPv6 field types. 2023-01-06 01:15:10 +00:00
João Valverde 522c74b734 dftest: More CLI options and improve output format 2023-01-05 20:26:42 +00:00