Commit Graph

389 Commits

Author SHA1 Message Date
João Valverde f653e52e0f CMake: Try to use FindPython3.cmake again
Use FindPython3.cmake instead of the deprecated FindPythonInterp.cmake,
to make sure we actually find Python3.

Don't use the module with MSYS2 because it is buggy and exhibits broken
behaviour.

Run it earlier in the configuration, just as a precaution, so other
indirect calls to find python don't happen earlier.
2023-05-27 12:49:29 +01:00
João Valverde f0e4c5262d Revert "CMake: Replace deprecated module FindPythonInterp"
This reverts commit d6380e7ae4.

Turns out we were unwittingly still using FindPythonInterp
instead of FindPython3.cmake, via LocatePythonModule.cmake,
nd this commit actually enabled FindPython3.cmake. Also turns
out FindPython3.cmake is far too clever and very buggy with MSYS2.
It will usually not find the correct python binary and fail in many
suprising ways, depending on which combination of Python Windows
installations is present.
2023-05-26 22:55:47 +01:00
João Valverde d6380e7ae4 CMake: Replace deprecated module FindPythonInterp 2023-05-26 19:38:42 +00:00
Nikolas Koesling 1e0989b418 add dissector for SINEC AP1 protocol 2023-05-25 10:17:16 +00:00
Nardi Ivan 10b93c1acc Add support for UDP Tracker Protocol for BitTorrent 2023-05-22 16:53:17 +02:00
Timo Warns 27550c4d6a GNSS: add dissectors for SBAS L1 navigation messages
Add dissectors for navigation messages of the Satellite-based
Augmentation System (on L1 frequency). Includes dissectors for message
types MT1, MT2 - MT6, and MT25.
2023-05-16 19:34:12 +00:00
Antoine Gardiol a5f5be477f 5CoRAP: New FiveCo Register Access Protocol dissector 2023-05-16 07:47:03 +00:00
Timo Warns 046f1762b2 GNSS: add dissector for the u-blox UBX protocol
Add dissector for the UBX protocol as used by u-blox GNSS receivers.
Includes dissectors for UBX-NAV-DOP, UBX-NAV-EOE, UBX-NAV-POSECEF,
UBX-NAV-PVT, UBX-NAV-SAT, UBX-NAV-TIMEGPS, UBX-NAV-VELECEF, and
UBX-RXM-SFRBX messages.
2023-05-07 06:20:45 +00:00
Nicolás Alvarez defd2d90fb Add initial dissector for Matter
Matter is an interoperable application-layer protocol to control IoT smart
home devices, maintained by the Connectivity Standards Alliance.

This dissector currently only parses the outer "message headers" and
"payload headers". The protocol also has encryption, a TLV encoding for
the payload, the application semantics of those TLVs, fragmented
payloads in UDP, support for TCP, etc. which is all missing from the
dissector for now, so there's still lots to do.

There is no defined port number (implementations pick an arbitrary port and
advertise it over mDNS), so I'm only making Matter available in "Decode As"
for now. In the future it would be nice to get the port from the mDNS
answers.

Some fields in the message header can be encrypted by "message privacy".
Since we don't support decryption yet, these currently show up as a
single "encrypted headers" field if the "message privacy" flag is set.
2023-04-21 13:45:13 +00:00
David Fort b049406ca4 rdp: add support for clipboard and audio out channels
This patch adds basic parsing for audio out and clipboard redirection, only the
kind of message is parsed, not the complete body, but that already gives some
useful informations.
2023-04-21 09:00:26 +00:00
Guy Harris 99c0b44fa4 Decouple the media_type dissector table from HTTP.
Put the header containing the structure that should be passed to
dissectors in the media_type dissector table, and the code that creates
the media_type dissector table, into epan/dissectors/packet-media-type.h
and epan/dissectors/packet-media-type.h, respectively.

Change the names of types, enum values, structure fields, and variables
to speak of "media containers" and "content" rather than to speak of
HTTP or messages; HTTP is not the only protocol or data format that can
contain media type headers and data whose type is specified by media
type headers.
2023-04-18 13:45:32 -07:00
David Perry fd8464e05d Add rtpdump read and parse support
Add a wiretap file format reader to read rtpdump files.
Generates "Exported PDU" data from the header of the rtpdump
file.

Add MIME file format read support for rtpdump files.

Change the default extension for exporting rtpdump files to '*.rtp' as
per the rtptools project's recommendation.

Wireshark generates rtpdump files slightly differently from how rtpdump
itself works. Both the wiretap reader and the MIME reader examine the
text and binary headers to determine the most appropriate presentation
of information to the user.
2023-04-13 13:26:13 +00:00
Stepan Chernousov b1fb652a03 ZigBee: Add dissectors for r23 stuff
Added dissector routines for new frames
2023-04-13 04:44:19 +00:00
David Fort 14509c18f3 rdp: add a dissector for the RAIL channel
This patch adds a dissector for the RAIL channel as defined in MS-RDPERP. This new
dissector is wired in the RDP dissector so that we interpret traffic for this
channel.
2023-04-12 07:00:45 +00:00
Henri Chataing 91e8f5db35 uci: Implement UCI packet dissector
Implement the dissector for Ultra-wideband controller
interface packets, based on the protocol description
on the FiRa consortium website:
  https://groups.firaconsortium.org/wg/members/document/1679

The dissector recognizes packets with PCAP identifier 293,
or TCP packets on port 7000 (default).
2023-04-08 08:18:28 +00:00
Benjamin Levine dfc2f43ad4 DO: Microsoft Delivery Optimization dissector 2023-03-23 14:55:44 +00:00
Harald Welte ae38e9b092 New dissector for GSM L2RCOP (3GPP TS 27.002)
This is a dissector for the GSM "Layer 2 Relay Character Oriented
Protocol" as used in non-transparent CSD (Circuit Switched Data)
calls in GSM and UMTS cellular networks.
2023-03-10 19:55:19 +00:00
Harald Welte f64e8f0796 Add new dissector for GSM RLP protocol (3GPP TS 24.022)
This protocol is used in the user plane of non-transparent CSD (Circuit
Switched Data) calls in GSM networks. RLP frames are sent over the Um
air interface, and are sent as modified V.110 frames over 64k TDM
channels in the back-haul/core network.  For modern implementations,
this means in RFC4040  RTP CLEARMODE.

As there's no V.110 decoder in wireshark, we cannot connect the RLP
decoder to that.  However, we hook it up to the GSMTAP dissector to
enable other software to pass the decoded RLP frames into wireshark.
2023-03-10 19:55:19 +00:00
Igor Dmitriev c11cffda3c TRDP: Add dissector for TRDP protocol 2023-03-08 09:58:43 +00:00
João Valverde 6d401f2eba CMake: Add a comment about dissector headers 2023-02-12 14:50:00 +00:00
Martin Mathieson 86f7777c4c file-pcapng: Provide mechanism for 'local' block handlers 2023-02-08 13:10:48 +00:00
Martin Gallo 48737e2983 SAPDIAG: Added SAP Diag as main dissector
Added the SAP Diag dissector protocol from [SecureAuth's plugin](https://github.com/SecureAuthCorp/SAP-Dissection-plug-in-for-Wireshark/blob/master/src/packet-sapdiag.c).

This is a dissector that implements the Diag protocol. Decompression of packets is not considered as this requires the proprietary LZC/LZH decompression routines still pending to be added in #8973. The Diag packets can be wrapped in an SNC frame, in which case the respective dissector is called. Embedded RFC calls are disabled as this requires the respective dissector to be found, which will be submitted in a separate merge request.

Details about the protocol and example requests can be found in [pysap's documentation](https://pysap.readthedocs.io/en/latest/protocols/SAPDiag.html).
2023-01-25 17:06:27 +00:00
João Valverde fe7bfdf6ca CMake: Require explicit installation of development headers
Develpment headers are a sizeable part of the binary installation
and most users won't ever require them. It's recommended to package
them separately in a devel package or SDK.

Create a CMake installation component for development headers
and add the EXCLUDE_FROM_ALL property.

Headers can be installed using the invocation:

    cmake --install <dir> --component Development
2023-01-18 03:35:13 +00:00
Sergey V. Lobanov 60912daef9 LLS: add dissector for ATSC3 Low Level Signalling (LLS) Protocol
LLS dissector is implemented according to A/331:2022-11.
.pcap sample: https://wiki.wireshark.org/SampleCaptures#lls-low-level-signalling-protocol
2023-01-10 09:49:18 +01:00
Sergey V. Lobanov ff7bab1730 ALP: add dissector for ALP protocol (ATSC3.0 A/330)
This is a port of SiliconDust ALP decoder provided in public repository
https://github.com/silicondust/wireshark

Original Author: Nick Kelsey <nickk@silicondust.com>
2023-01-08 16:09:47 +00:00
Harald Welte 1be5ec9433 DECT-NWK: Initial dissector for DECT NWK layer
Change-Id: Idf0b97ce40ec5b2dd1b507a72fed64cfee288354
2022-12-21 21:30:20 +00:00
Harald Welte a13d71dab9 DECT-DLC: Initial dissector for DECT DLC protocol layer
Change-Id: Iabd75b0f9b12ea9162dc164741123feb1ba7992d
2022-12-15 12:17:29 +00:00
Martin Gallo 129ed6d4c4 SAPSNC: Added SAP SNC as main dissector 2022-11-29 13:34:38 +00:00
Bernhard Dick 534e594a34 DECT-MITEL-RFP: Begin of OMM/RFP protocol
This is the begin of a basic dissection of the proprietary protocol used
by the Mitel OMM/RFP communicatino over TCP. Currently no decryption is
supported so there is the need of external decryption.
2022-11-28 15:04:15 +00:00
Bernhard Dick a31c5923e1 DECT-MITEL-ETH: Unify naming
This commit unifies the naming within the dissector for the DECT over
Ethernet protocol within the Mitel DECT base stations (RFPs).
2022-11-28 15:04:15 +00:00
Jim Young 963877e921 discard: Implement dissector for RFC 863 2022-11-28 13:24:17 +00:00
Martin Gallo fdc211984f SAPMS: Added SAP MS as main dissector 2022-11-22 09:27:10 +00:00
Martin Gallo 82b5201f79 SAPRouter: Added SAP Router as main dissector 2022-11-21 15:01:59 +00:00
Jeremy Kerr 889e5331dc Add NVMe Management Interface (NVMe-MI) dissector
This change adds a small dissector for the NVMe-MI protocol, typically
for tunelling Administration commands over an MCTP (over I2C) channel.

We just decode the request and response headers, and leave the payload
as raw data.

Signed-off-by: Jeremy Kerr <jk@codeconstruct.com.au>
2022-11-15 09:05:05 +00:00
Jeremy Kerr baf7a3c493 Add MCTP control protocol dissector
This change adds a very basic dissector for the MCTP control protocol -
just the header fields, leaving the raw payload data.

Signed-off-by: Jeremy Kerr <jk@codeconstruct.com.au>
2022-11-15 09:05:05 +00:00
Jeremy Kerr e1cbe02cce Add Management Component Transport Protocol (MCTP) dissector
This change adds a protocol dissector for the Management Component
Transport Protocol (MCTP). This is a failry simple datagram-based
protocol for messaging between components within a single platform,
typically over I2C, serial or PCIe.

This dissector just implements the header fields, and sequence-number
based message reassembly. Inner protocols will be added as follow-up
changes.

Linux has support for AF_MCTP data, so decode from the MCTP SLL ltype.

Signed-off-by: Jeremy Kerr <jk@codeconstruct.com.au>
2022-11-15 09:05:05 +00:00
Martin Gallo 59fdaa7d07 SAPEnqueue: Added SAP Enqueue Server as main dissector 2022-11-14 20:35:17 +00:00
Martin Gallo 384bf49591 SAPHDB: Added SAP HDB as main dissector 2022-11-11 13:10:00 +00:00
Martin Gallo 0562fe46f6 SAPIGS: Added SAP IGS as main dissector 2022-11-06 14:27:25 +00:00
David Perry f2105250fa Dissector CMakeLists: custom header+support files 2022-11-01 14:13:57 +00:00
AndersBroman 3be3b2cc95 H224: Add a basic dissector
ping: #18514
2022-10-21 08:18:07 +00:00
Martin Gallo fc052615a6 SAPNI: Added SAP NI as main dissector 2022-10-16 19:59:59 +00:00
Joakim Karlsson 00f4f4ee7d JSON: add seperate 3GPP file
Moving specific 3GPP keys handle to its own file
This will also enable custom JSON string dissector
2022-10-04 10:48:08 +00:00
Michael Tuexen cf36b716b0 BBLog: refactor and update the list of events 2022-09-15 09:16:10 +00:00
Dr. Lars Völker 05916eec1f DLT: Adding support to open DLT files
This patch allows Wireshark to open DLT files directly.
2022-08-26 07:45:36 +00:00
Martin Mayer ffde66ea7c dissector: Open Control Protocol OCP.1/AES70 2022-08-24 14:20:18 +00:00
Joakim Karlsson 387a769003 PCAPNG: make dissect_block public for custom dissectors 2022-08-12 14:09:45 +02:00
Dr. Lars Völker 3e7ea95108 TECMP: Adding Subdissector support
Adding subdissector support based on interface_id. This allows to write
custom dissectors for e.g. UART/RS232 data.
2022-07-22 17:40:06 +00:00
Ferry Huberts 0a42b0976b Locamation Interface Module dissector for IM1
Signed-off-by: Ferry Huberts <ferry.huberts@pelagic.nl>
2022-07-20 06:25:51 +00:00
Thomas Vogt 95b01dc4bf GREbond: Add support for Huawei's GRE bonding (RFC8157) control protocol
This dissector is for the control messages of the GRE bonding protocol by
Huawei. These messages are encapsulated in GRE and can appear on both/all
bonding links.

During development, I made heavy use of traffic for Deutsche Telekom Hybrid
service. There fore, it also supports the first version which did not have an
IEEE assigned ethertype.
2022-06-23 19:40:25 +00:00