Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
|
|
Add field expression functions to convert unsigned integer
and char fields to hex or decimal. (BASE_OCT is handled
somewhat different currently now, presumably because it
can't be used in filters, so leave that commented until
it is handled as a display representation.)
Currently string() always converts unsigned integers to their
decimal representation so it is the same as dec(), but possibly in
the future string() might use the native base.
These can be used in columns thanks to the fix for #15990
Fix #5308
|
|
[skip ci]
|
|
Change our menu path separator to "//" similar to our filter buttons.
Change the "name" configuration element to "path", since it's a menu
path. Add a separate "title" element. This lets us use names like "Foo
I/O".
|
|
Change some instances of "packet" to "event" in Logray's menu items.
Remove "Export Objects" and "Export PDUs" and associated code. Remove
the packet diagram menu items and associated code. Remove the "Decode
as" menu items and associated code.
Use "Selected" instead of the parenthetical plural "Packet(s)" for
marking and ignoring. Remove an attempt at plural translation which
apparently doesn't work if we don't have a "%n" in the translation
string.
|
|
When showing the follow data as text (ASCII, UTF-8, EBCDIC, etc), add a
newline at each turn. Add the ability to show delta times between
packets and turns. Add a recent setting for delta times.
Make the initial dialog a bit wider.
Save and restore our scoll position when reading a stream.
Manually connect our signals and slots. Fix some clazy warnings.
|
|
|
|
Fix the distributed examples to use the "new" style configuration,
as shown in the WSUG and Wiki. Fix the FTP example in the WSUG,
as it's missing the Match keyword
Related to #12118.
Fix #16940
|
|
For file sets produced by multiple file captures, match both
the number before time and the newer time before number format.
Distinguish them in the return value, since files of different
formats are not part of the same set.
Also handle files with a compression suffix as well, as we can
produce that in captures. Since in multi file captures compression
is done when switching files, allow file sets to have a mixture of files
compressed and uncompressed. When doing a multi file capture and
compressing, the last file is not compressed.
Add information to the user guide and release notes
Related to #12371
|
|
Instead of requiring ${macro:arg1;...;argN}, allow the format
${macro;arg1;...;argN}.
The semicolon isn't used anywhere else, it's simple to support,
and already used in the macro syntax. It's easier to remember
if all the separators in a macro are the same.
The colon is allowed in literals, which is why it's not used
between the arguments in the macro argument list, and allowing
it after the name makes the grammar more complicated, including
tokenizing when having pop-ups of potential field matches in
the display filter line edit (#19499.)
Update the documentation for this. Also edit the documentation
for macro syntax in a few places where it implies that whitespace
in macro arguments would be ignored; in fact, it's significant.
|
|
Add a `-p` option, which lets you specify an installation prefix for
software libraries. Ruby gems and Python modules (Asciidoctor and
pytest) still install into their default locations.
[skip ci]
|
|
|
|
Update manuf, services enterprise numbers, translations, and other items.
|
|
|
|
|
|
Add custom title option %C to show the first capture comment from
command line argument.
Ping: #19296
|
|
Update manuf, services enterprise numbers, translations, and other items.
services failed.
|
|
|
|
|
|
Remove the major.minor version from the plugin path, i.e:
lib/plugins/X.Y/{epan,wiretap,codecs}
and use an unversioned path:
lib/plugins/{epan,wiretap,codecs}
Introduce a new naming policy for plugins that requires
name.so.ABI_VERSION.
This is a simplified filesystem layoutfor plugins some
important benefits such as:
* improves compatibility between Wireshark versions, because
a plugin that wasn't recompiled will be automatically picked
up, but only if it has a compatible ABI version in the file name.
* does not clash with Apple guidelines
* simpler for users to understand and apply
* just overall simpler and easier to maintain, removes a lot
of complexity from CMake code
It does impose more requirements on the plugin naming scheme
but this should be handled completely transparently
by the build system.
It would also be possible to add support for unversioned *.so file
extensions at the same time, although in ths case it is not possible
to support multiple Wireshark ABI versions with only *.so, of course.
This wasn't done here but it may or may not be a useful enhancement
in the future.
Follow-up to 90b16b40921b737aadf9186685d866fd80e37ee6.
|
|
[skip ci]
|
|
A tap_id is never 0, so initializing tap variables to -1 is not
necessary.
|
|
|
|
Those are no longer supported by Microsoft nor Qt 6.
Also add Windows 11 and Server 2022 to the list of MS supported
versions.
[skip ci]
Fix #19512
|
|
Update manuf, services enterprise numbers, translations, and other items.
|
|
Manual revert of commit 0e82c6b4b8ed18ef1878446dd26d6345be2d2c2b.
Fixes #19493.
|
|
The NSIS installer choices have been simplified, and Wireshark
Foundation signs our official macOS packages.
|
|
Remove init of proto, header field, expert info and subtree variables.
This will reduces the binary size by approximate 1266320 bytes due to
using .bss to zero-initialize the fields.
The conversion is done using the tools/convert-proto-init.py script.
|
|
Update manuf, services enterprise numbers, translations, and other items.
services failed.
|
|
According to the Asciidoctor docs, we can assign multiple anchors
to a section using this method, which still uses the modern shorthand
syntax for the main anchor (the one that's been used for the last five
years). We have to use the double square brackets for the additional
anchor, though.
https://docs.asciidoctor.org/asciidoc/latest/attributes/id/#add-additional-anchors-to-a-section
Related to #17982
|
|
The help button for Time Shift already tries to open this page,
so use the existing name for the section so older versions work.
Related to #17982
|
|
[skip ci]
Follow-up to fix #18464
|
|
The XXXXXX is not a number, it's alphanumeric
[skip ci]
Fix #18464
|
|
Initially taken from the Wiki page (including images, compressed
with tools/compress-pngs.py), and expanded to cover lastest additions.
Link the Help button from the 802.11 Decryption Keys UAT to the page.
Fix #11273
|
|
|
|
|
|
Add support for command line parameters, rename the preference to match.
Use the correct `SSLKEYLOGFILE` environment variable name in the text.
Rename SSL to TLS, we are no longer in 1999. Clarify that applications
other than browsers can be selected. Various dialog text improvements.
Move the Launch button to the right to make it stand out more.
Relates to #19471
|
|
|
|
Add a script to initialize static proto values to 0 instead of -1.
This will save ~1MB static init code.
|
|
Once upon a time, Wireshark could use GNU ADNS instead of c-ares
for asynchronous DNS lookups. GNU ADNS didn't check the system
hosts file (see 51984de040b804ca6614830acc62c641cd6d8959), so
we added the system hosts file using the same mechanism as profile
paths when using ADNS.
This was then confusing, because "use external DNS resolver / use
system DNS resolving" could be off but /etc/hosts was still used,
so the "only use profile hosts" option was created to avoid using
external system DNS hostsnames at all.
c-ares (and, for that matter, libunbound) does read /etc/hosts, so
this option doesn't do its primary purpose anymore. All it usually
does now is keep any hosts file in the global profile from being used,
but we don't have any other name resolution options where there's a
pref not to use global profile data.
Even more confusingly, if the option is true, then the -H option
to tshark to give a hosts file on the command line doesn't work.
add_hosts_file checks the preference and then doesn't actually
read the file from the command line, which is surely never wanted.
Most people don't understand what the option means, despite the
tooltip, and assume that it means "only use the hosts file as a
source of name resolution data", not "when using hosts files as
a source of name resolution data, only use the one from the personal
profile and not any from the global profile, the tshark command line,
or any other source."
Just mark the option as obsolete.
Related to #11470
|
|
Describe the at operator and field references, taking some
information from the wireshark-filter man page and expanding some.
Create some cross-references between saved filters, filter buttons,
display filter macros, and field references, because they're all
useful to use with each other.
Fix #17594
|
|
Ran `tools/convert-glib-types.py` over the files in `doc/` and
`docbook/`, then manually checked/massaged/reverted results as
appropriate.
One small step towards addressing #19116
|
|
We can launch more than browsers.
|
|
It doesn't "look the same as the ASCII setting," it's ASCII hex
bytes instead of a text representation. Also note that the display
has added line separators per packet, but saving it does not.
[skip ci]
|
|
It's more compact than "bitwise_and" and inspired by C.
|
|
f21cd2e23f removed the last of our Bison code, so there's no need to
have "GPL (v3 or later) (with Bison parser exception)" in the allowed
license list.
|
|
|
|
This reverts commit ef836e9afecd30901ea68677867c69b520f87d6a.
To improve usability the commit created other issues that do not
have an easy fix.
|
|
Restore the type hierarchy for efficient loading of binary
plugins. Do not recurse.
Allow an exception for the root of the binary plugins
folder. Scan this path also and skip incompatible plugins.
This facilitates quick manual copying of plugins.
Follow-up to ef836e9afecd30901ea68677867c69b520f87d6a.
|