Commit Graph

78680 Commits

Author SHA1 Message Date
Gerald Combs ece76abdd3 GitLab CI: Move commit validation to its own job.
Move the pre-commit and validate-commit checks to their own job. This
lets us quickly re-run validate-commit in case the submitter forgets to
check "Allow commits from members who can merge to the target branch"

Shorten the "merge-request" prefix to "merge-req" in order to make it
easier to distinguish between each job in the GitLab UI.
2020-09-16 01:04:34 +00:00
Gerald Combs 573894d870 Version: 3.3.0 → 3.3.1. 2020-09-15 17:29:32 -07:00
Aurelien Aptel 53ebca9b34 SMB2: add posix extensions
Remove the old posix_v1 code which no clients ever implemented and add
code to dissect current version of the POSIX extensions as implemented
by the Linux kernel client (cifs.ko).
2020-09-15 22:21:33 +00:00
Gerald Combs c37f1e4de0 Build: 3.3.0. 2020-09-15 13:56:25 -07:00
Gerald Combs 3426b25621 Qt: Make sure the packet diagram's FT_NONE label exists.
Gap items have a null field_info pointer, so set "Unknown" as the
default representation string and fill it in after we've established
that field_info is valid. Closes #16851.
2020-09-15 19:40:35 +00:00
George Hopkins 0c373d648a IEC104: add dissection of CP24Time2a time tags 2020-09-15 16:19:50 +02:00
Guy Harris 3417380d65 ncp: fix display of DS_FULL_CLASS_DEFS.
The last item in the reply information is an ACL.  Display it as such.
2020-09-15 04:04:33 -07:00
Alexander Couzens c1889e3cd5 gsm_a_rr: move TARGET PCID into the correct subtree 2020-09-15 10:30:08 +00:00
Guy Harris c5a6fccb30 ncp: pass the NDS class definition type to process_multivalues().
Pass the value of the NDS class definition type to process_multivalues()
as the vflags, rather than the NDS flags, as that's what the
MVTYPE_CLASS_NAMES case in process_multivalues() is expecting.

That way, the class definitions will be dissected correctly.
2020-09-15 03:01:06 -07:00
Guy Harris 395d2e7425 NCP: add more comments to tools/ncp2222.py.
Point to more NCP and NDS documentation.
2020-09-15 02:08:48 -07:00
Ronnie Sahlberg e75969fb71 quic: show encapsulated protocols as top level trees
Signed-off-by: Ronnie Sahlberg <ronniesahlberg@gmail.com>
2020-09-15 04:36:54 +00:00
Ronnie Sahlberg 72921f8867 packet_diagram: use a better label for FT_NONE items
FT_NONE items all have the name "Text Item" which makes it look
poor in the packet diagram.
For these fields, switch to use ->representation insead of ->name
to make these fields look more meaningful.

SMB2 is a protocol that consists of two FT_NONE expansions,
one for the Header and a second for the actual Command.
This makes packet diagram show this much nicer.

Signed-off-by: Ronnie Sahlberg <ronniesahlberg@gmail.com>
2020-09-15 03:31:44 +00:00
Gerald Combs 3b9656780b Qt: Don't fill in the packet diagram if it's not visible.
Don't bother filling in our scene if the widget isn't visible.
2020-09-15 03:03:11 +00:00
Martin Kaiser adfded498a Qt: FieldInformationGraphicsItem: fix a memory leak
FieldInformationGraphicsItem's constructor allocates a FieldInformation
which is never freed.

Opening MTP3 statistics for any capture file causes memory leaks.

Indirect leak of 1120 byte(s) in 10 object(s) allocated from:
    #0 0x55e32cf19a42 in operator new(unsigned long)
    #1 0x7f4cca598661 in QObject::QObject(QObject*)
    #2 0x55e32d5f397f in PacketDiagram::addDiagram(_proto_node*)
...

Indirect leak of 400 byte(s) in 10 object(s) allocated from:
    #0 0x55e32cf19a42 in operator new(unsigned long) ...
    #1 0x55e32d5fce04 in FieldInformationGraphicsItem::FieldInformationGraphicsItem(...)
    #2 0x55e32d5f397f in PacketDiagram::addDiagram(_proto_node*)
...

Add a FieldInformationGraphicsItem destructor and delete FieldInformation there.
2020-09-14 21:51:11 +00:00
Anders Broman 9f7a06ff88 http: Put the Digest parameters in a subtree. 2020-09-14 14:30:23 +02:00
Nardi Ivan 25d10e68a8 GQUIC: fix dissection of ACK frame 2020-09-14 11:10:43 +02:00
Alexis La Goutte 3f171542ac gQUIC: Add MAD0 Tag (Max Ack Delay) 2020-09-14 05:50:25 +00:00
Nardi Ivan c38c83c38f GQUIC: add support for Q046
Even if Q046 is an old version, it is still used by the current QUICHE
implementation.
In this way, the latest Wireshark is able to dissect all GQUIC versions
supported by recent Chrome (Q043,46,50 and T050,51), i.e. all GQUIC versions
that you can find in live traffic right now.
Pcap examples are available in #15984 and in the attachment.
Some Q046 information are available in:
https://docs.google.com/document/d/1FcpCJGTDEMblAs-Bm5TYuqhHyUqeWpqrItw2vkMFsdY/edit#heading=h.32qkkficm7za

Close #15984
2020-09-14 03:44:44 +00:00
Gerald Combs 84deceaf1c DVB-S2-TABLE: Another spelling fix.
Fix

I: libwireshark0: spelling-error-in-binary usr/lib/x86_64-linux-gnu/libwireshark.so.0.0.0 Continous Continuous

found by lintian.
2020-09-14 01:29:05 +00:00
Gerald Combs bd9554543c DVB-S2-TABLE: Fix spelling.
Fix

I: libwireshark0: spelling-error-in-binary usr/lib/x86_64-linux-gnu/libwireshark.so.0.0.0 adress address

found by linitian.
2020-09-14 00:45:20 +00:00
Gerald Combs cc3c195a32 WASSP: Fix spelling.
Fix

I: libwireshark0: spelling-error-in-binary usr/lib/x86_64-linux-gnu/libwireshark.so.0.0.0 Mangement Management

found by lintian.
2020-09-14 00:04:45 +00:00
Guy Harris 2260fabbdb ncp: fix indentation. 2020-09-13 14:18:47 -07:00
Thiyagarajan P 78466d1046 Support to dissect beacon timing element
Added support for dissecting the beacon timing element.
IEEE80211-2016, section 9.4.2.105.
2020-09-13 20:16:07 +00:00
Gerald Combs 951837a644 A615a: Fix spelling.
Fix

I: libwireshark0: spelling-error-in-binary usr/lib/x86_64-linux-gnu/libwireshark.so.0.0.0 Ammendment Amendment

found by lintian.
2020-09-13 18:01:01 +00:00
Gerald Combs d04afaf4c7 [Automatic update for 2020-09-13]
Update manuf, services enterprise numbers, translations, and other items.
2020-09-13 15:43:11 +00:00
Nardi Ivan 46456dcf1a TLS: add missing parameters in QUIC Transport Parameters 2020-09-13 13:07:46 +00:00
Martin Mathieson 82827278f7 More dissector string spelling fixes.
Finally, it is becoming difficult to find more.
2020-09-13 09:03:08 +01:00
Alexis La Goutte 2f89b8d62c SMB/NBT: Add support of SMB over QUIC
Using ALPN smb

Issue: #13881

Thanks to Graham for help to use directly nbt dissector
2020-09-13 06:15:29 +00:00
Gerald Combs 97a6146d81 Qt: Fixup packet diagram tick label placement.
Try to place the labels one space away from the nearest big tick mark.
2020-09-12 22:00:50 +00:00
Guy Harris 272502790b Add FT_STRINGZTRUNC.
FT_STRINGZPAD is for null-*padded* strings, where the field is in an
area of specified length, and, if the string is shorter than that
length, all bytes past the end of the string are NULs.

FT_STRINGZTRUNC is for null-*truncated* strings, where the field is in
an area of specified length and, if the string is shorter than that
length, there's a null character (which might be more than one byte, for
UCS-2, UTF-16, or UTF-32), and anything after that is not guaranteed to
have any particular value.

Use IS_FT_STRING() in some places rather than enumerating all the string
types, so that those places get automatically changed if the set of
string types changes.
2020-09-12 14:16:12 -07:00
Pascal Quantin 7811c06272 PFCP: fix dissection of C-TAG and S-TAG IEs 2020-09-12 20:29:16 +00:00
João Valverde fd7739de6b CMake: Fix libssh >= 0.9.5 version detection
libssh 0.9.5 moved version macros to a different header file.

Closes #16845
2020-09-12 16:38:01 +01:00
Alexis La Goutte 889dd0cbfb QUIC: Update to draft-30
Update value_string version (0x000e)
Add AEAD_LIMIT_REACHED (0xf) Error (with conflict fix : https://github.com/quicwg/base-drafts/pull/4088)

Issue #13881
2020-09-12 09:26:33 +00:00
Ronnie Sahlberg 9182bb9c48 smb2: add NegotiateContext/Compression flags field
Signed-off-by: Ronnie Sahlberg <ronniesahlberg@gmail.com>
2020-09-12 07:39:58 +00:00
Guy Harris 1a410ef0b0 ncp: fix a copy-and-pasteo.
In process_multivalues(), we create a protocol item for the attribute
syntax, but we don't fetch its value, and don't pass it to
print_nds_values() as the syntax argument; instead, we pass a variable
that wee initialize to 0, but never set.  (One of the disadvantages of
preemptively initializing local variables is that data flow analyzers in
compilers and static analyzers can't point out that you didn't set the
variables in question to *useful* values.)

This fixes the dissection of NDS Read replies.
2020-09-11 23:23:47 -07:00
Harald Welte 13ac47ad4e Q.933: Fix decoding of PVC Status field
This field is actually a bitmask of four bits.  It's somewhat odd
to decode it using a value_string.  In any case, the values were
plain wrong (shifted to the left by '1').

See Figure A.3 of ITU-T Q.933

A related pcap file can be found at
https://people.osmocom.org/laforge/pcap/gsmtap-fr-q933-pvc_status.pcap
2020-09-11 23:42:00 +02:00
Harald Welte ee292b11a7 Q,933: Fix display of 'active' bit in PVC Status
The mask applied to the final octet of the PVC Status IE must be 0x0E,
not 0x0A.  The current code masks out the active bit, printing a '.'
instead of it.

See Figure A.3 of ITU-T Q.933

A related pcap file can be found at
https://people.osmocom.org/laforge/pcap/gsmtap-fr-q933-pvc_status.pcapc
2020-09-11 22:40:33 +02:00
Odysseus Yang 726e0ccb0a MBIM: dissect the commands of MBIM extended version 2.0
MBIM_CID_VERSION
MBIM_CID_REGISTER_STATE
MBIM_CID_PACKET_SERVICE
MBIM_CID_SIGNAL_STATE
2020-09-11 17:10:58 +00:00
Guy Harris 20ae645964 ncp: add a comment about possibly null-truncated strings.
In File Search Continue requests, the path is a single byte giving the
string length, followed by that many bytes containing the string value.

However, in at least some File Search Continue requests, the string
length value is longer than the string, and there's a NUL, followed by
other non-zero cruft, in the string.
2020-09-11 01:36:52 -07:00
robionekenobi 83b45f0c2e packet-mq: Improve Structure Display
FCNO Improve field display
FOPA Improve field display
FCMI Support new structure
GMO  Support version 4
LPOO Improve field display
ID   Initial Data Improve field display
PMO  Improve QName display in COL_INFO
CONN Improve field display
2020-09-11 08:12:24 +00:00
Guy Harris e32d2c7a7a gvsp: fix type of GenDC signature.
To quote the GenDC 1.1 specification, section 2.2.2 "GenDC Container
Header Description":

	Unique signature identifying a GenDC Container: a FourCC code
	encoded as 4 ASCII characters not null terminated ...

so it's FT_STRING, not FT_STRINGZ.

Give the URL for a page pointing to all GenICam standards, including the
GenDC standards, version 1.0 and 1.1.
2020-09-10 23:35:09 -07:00
Pascal Quantin cb810e7003 proto.c: add support for BASE_SPECIAL_VALS to fill_label_number64()
This is similar to what is done in fill_label_number()
2020-09-11 03:12:07 +00:00
Guy Harris b340dc8de8 SAP: make the Server Name field FT_STRINGZPAD.
According to the Novell IPX Router Specification, Chapter 4 "Service
Advertising Protocol (SAP)":

	Server Name

	This field contains the 48 byte character string name that is
	assigned to a server.  The Server Name, in combination with the
	Service Type, uniquely identifies a server on an internetwork.
	Although SAP response packets always include the full 48 bytes
	for this field, typical server names are usually less than 48
	characters long and are ASCII NULL terminated.  The contents of
	the unused bytes which follow the NULL terminator are undefined.

which seems to indicate that a full 48-byte name will not have a null
termintor.  It also indicates that the field isn't null-padded, just
"null-terminated if it's not terminated by the end of the field's fixed
length"; perhaps we need to distinguish between the former and the
latter, although it's not clear what would be a good short name for the
latter.

In any case, it sounds as if it's not guaranteed to be null-terminated.
2020-09-10 18:32:35 -07:00
Guy Harris 3fa8f42c76 bpdu: fix some string types.
As per IEEE Std 802.1Q-2016, section 13.8 "MST Configuration Identifier
(MCID)",

	The Configuration Name, a variable length text string encoded
	within a fixed field of 32 octets, conforming to IETF RFC 2271's
	definition of SnmpAdminString.  If the Configuration Name is
	less than 32 characters, the text string should be terminated by
	the NUL character, with the remainder of the 32-octet field
	filled with NUL characters.  Otherwise, the text string is
	encoded with no terminating NUL character.

so it's not FT_STRINGZ, it's FT_STRINGZPAD.

This applies to other configuration names as well.
2020-09-10 16:20:09 -07:00
Alexander Couzens f33e1c13fa gsm_a_rr: correct spare bits of Channel Description
ETSI 44.018: 10.5.2.5: spare bits are 3+4 and not 5+6. The counting
in the spec might be confusing, because bits start at 8 not at 1.
2020-09-10 22:37:41 +00:00
Guy Harris 5e1a302d9e afp: treat passwords as null-padded.
They're sent over the wire as an 8-octet field, with passwords shorter
than 8 octets padded with NULs.

Update some URLs while we're at it.
2020-09-10 14:28:29 -07:00
Aurelien Aptel fd922bc806 SMB2: add new RDMA transport negotiate context
From [MS-SMB2] version 61.
2020-09-10 20:26:22 +02:00
Aurelien Aptel 51a1765698 SMB2: add new transport negotiate context
From [MS-SMB2] version 61.
2020-09-10 20:26:22 +02:00
Aurelien Aptel 76229da61d SMB2: add new compression algorithm in negotiate context
From [MS-SMB2] version 61.
2020-09-10 20:26:22 +02:00
Nardi Ivan bb563317a1 GQUIC: fix endianess for Q050, T050 and T051 2020-09-10 15:02:19 +00:00