aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2020-01-10Qt: Add elements back to the tcptrace graph.Gerald Combs2-40/+57
Segment and SACK elements in the tcptrace graph are plotted using QCustomPlot's error bars. This part of QCP's API changed from version 1 to 2, and were #ifdef'ed out as part of the switch to QCP 2.0.1. Update our code to use the new API. Bug: 16281 Change-Id: Ieae2808686ddc631e0cd18c0c32fc7a2c0f396b7 Reviewed-on: https://code.wireshark.org/review/35726 Reviewed-by: Gerald Combs <gerald@wireshark.org> Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-10Netlink: Properly interpret and mask out attribute typeJaap Keuter1-5/+10
The netlink attribute type is a 16 bit field, of which the two top most bits are booleans. Interpret them as such. The remaining 14 bits form the attribute type value. Due to the flexible way the interpretation is setup, through the use of family specific code, the header field for the attribute type value has to have a proper mask. Otherwise the two top bits are taken (incorrectly) as part of the value. Since this may not be obvious to the netlink family dissector creator better enforce it by adding the masked value in the underlying netlink dissector, using whatever header field is given for this. Change-Id: I791f9b1de01505d4a4793abbcf62e596b864e2f0 Reviewed-on: https://code.wireshark.org/review/35725 Reviewed-by: Jaap Keuter <jaap.keuter@xs4all.nl> Petri-Dish: Jaap Keuter <jaap.keuter@xs4all.nl> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-10packet-kerberos: try to fix the build on macOS 10.14Gerald Combs4-17/+43
/usr/lib/libkrb5.dylib doesn't have krb5_pac_verify(). This hopefully fixes the build problem introduced by commit d9aab840a75ededc286b8e9894e5af7ce6298bbc Change-Id: Ib354a59cbc20c6bf97ddc029d8b042d4aea6dae9 Reviewed-by: Stefan Metzmacher <metze@samba.org> Reviewed-on: https://code.wireshark.org/review/35713 Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Gerald Combs <gerald@wireshark.org>
2020-01-09NR RRC: upgrade dissector to v15.8.0Pascal Quantin6-192/+323
Change-Id: I2001239b765ab766c31c0e4181e25e43d8d9c761 Reviewed-on: https://code.wireshark.org/review/35723 Petri-Dish: Pascal Quantin <pascal@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Pascal Quantin <pascal@wireshark.org>
2020-01-09LTE RRC: upgrade dissector to v15.8.0Pascal Quantin11-1116/+1115
Change-Id: Ib480626891c1796623902c6dfe24183ead59112e Reviewed-on: https://code.wireshark.org/review/35722 Petri-Dish: Pascal Quantin <pascal@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Pascal Quantin <pascal@wireshark.org>
2020-01-09AUTHORS: reword a bit some acknowledgements.Dario Lombardo1-2/+3
Lines in the generated AUTHORS-SHORT file are processed as they were "Name" <email>. This means that any line going to this file must start with that format. After lines have been merged, the name/email must be at the very beginning of its line. Fix a regression introduced in g1e0fa912d4. Add Roman Koshelev while here as result of automatic authors generation. Change-Id: I82ad403a68aa081cf63d6444953edecf2b7e813b Reviewed-on: https://code.wireshark.org/review/35714 Petri-Dish: Dario Lombardo <lomato@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-09packet-ip.c: The return value is already calculated and returned by the ↵Joerg Mayer1-4/+2
previous call. Change-Id: I9471e4f823d82d31d41ccd21728358ab363854cd Reviewed-on: https://code.wireshark.org/review/35719 Reviewed-by: Jörg Mayer <jmayer@loplof.de>
2020-01-09Add Ethertype 8988 used on the heartbeatlink inside a Paloalto firewall clusterJoerg Mayer2-1/+6
Change-Id: Id1aef0ba84e17ee15c51af3110a1af4636fd6e4d Reviewed-on: https://code.wireshark.org/review/35718 Reviewed-by: Jörg Mayer <jmayer@loplof.de>
2020-01-09wka: Add Cisco ACI gleaning src MACJoerg Mayer1-0/+2
Change-Id: Ib3ed85b20463d8dc0757ac743890dbd7a0d13e70 Reviewed-on: https://code.wireshark.org/review/35717 Reviewed-by: Jörg Mayer <jmayer@loplof.de>
2020-01-09tvbuff.h: Fix formatting inside a comment.Joerg Mayer1-1/+0
Change-Id: Idec8da435bd45a559ad802cb7c9080a7ab5013e3 Reviewed-on: https://code.wireshark.org/review/35716 Reviewed-by: Jörg Mayer <jmayer@loplof.de>
2020-01-09Qt: Fix PacketListHeader columnRoland Knall6-4/+37
Due to changes in #35206, if you have a lot of columns the display of all columns may be hindered depending on your screen resolution. With this change, displaying the column information can be disabled via a Preferences->Layout checkbox element. Additionaly, the column information will always be displayed as a tooltip element Bug: 16317 Change-Id: Ib8c0fc0a84deaca96631270b320f3a530ba87d89 Reviewed-on: https://code.wireshark.org/review/35706 Petri-Dish: Roland Knall <rknall@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Roland Knall <rknall@gmail.com>
2020-01-09TPNCP: Update from downstreamOrgad Shaneh2-445/+407
* Support little-endian systems * Improve error reporting * Implement some new features in the protocol Change-Id: I73e07a588c4a028fd0c22e1570adb7957ba2d52f Reviewed-on: https://code.wireshark.org/review/35467 Petri-Dish: Michael Mann <mmann78@netscape.net> Tested-by: Petri Dish Buildbot Reviewed-by: Michael Mann <mmann78@netscape.net>
2020-01-09TCP: fix DESEGMENT_UNTIL_FIN handling in combination with OoO trackingPeter Wu1-2/+27
For dissectors that expect reassembly at FIN (for example, the WHOIS dissector), the expected end of the reassembly is not known until the FIN packet is received. We cannot rely on 'nxtseq' being valid, and certainly not use it to set the end of the reassembly using fragment_reset_tot_len. Since (1) OoO segments before FIN are already properly handled without extra care, and (2) OoO FIN is already broken, just disable OoO handling when DESEGMENT_UNTIL_FIN is requested. This ensures that reassembly at FIN is not skipped due to lack of data. Explicitly calculate 'nxtpdu' for the FIN case. Previously it happened to work because streams were often smaller than DESEGMENT_UNTIL_FIN (0x0ffffffe, 256MiB), but that was not obvious. Bug: 16289 Change-Id: I9b9468925d49765e21e58136c8a2366da082eeba Fixes: v2.9.0rc0-1097-gca42331437 ("tcp: add support for reassembling out-of-order segments") Reviewed-on: https://code.wireshark.org/review/35543 Petri-Dish: Peter Wu <peter@lekensteyn.nl> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-09GSUP/SMS: also dissect ToN/NPI header in SM-RP-DA/OAVadim Yanitskiy1-4/+8
Unlike IMSI, both MSISDN and SMSC Address in SM-RP-OA/DA not only contain the BCD encoded digits, but also a little header with NPI (Numbering Plan Identification), ToN (Type of Number), and Extension fields. IE: SM-RP-DA (Destination Address) Information Element Identifier: SM-RP-DA (Destination Address) (65) Information Element Length: 8 Address Type: SMSC Address (3) 1... .... = Extension: No Extension .001 .... = Nature of number: International Number (0x1) .... 0001 = Number plan: ISDN/Telephony Numbering (Rec ITU-T E.164) (0x1) E.164 number (MSISDN): 447785016005 Country Code: United Kingdom of Great Britain and Northern Ireland (44) Let's dissect that header and following address bytes using the public API from MAP dissector - dissect_gsm_map_msisdn(). Change-Id: Idc8a098926d38770002ba689efcf2c794c6b18d9 Reviewed-on: https://code.wireshark.org/review/35664 Reviewed-by: Pascal Quantin <pascal@wireshark.org> Petri-Dish: Pascal Quantin <pascal@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-09DCERPC: display various driver version fields as hexGünther Deschner1-4/+4
Guenther Change-Id: I39eecf3e864df401dff9236d9614a5bd6ca68427 Signed-off-by: Guenther Deschner <gd@samba.org> Reviewed-on: https://code.wireshark.org/review/35693 Petri-Dish: Anders Broman <a.broman58@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-09WSDG: Update the libraries chapter.Gerald Combs1-30/+45
C-ares is required, so don't mark it as optional. Add Win64 download URLs and list them first. Zlib is part of our vcpkg bundle. Change-Id: I232f4df988aa12afde0b66fff203187136504e94 Reviewed-on: https://code.wireshark.org/review/35700 Reviewed-by: Gerald Combs <gerald@wireshark.org> Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-09packet-kerberos: try to verify the PAC checksums and display the used keysStefan Metzmacher2-7/+239
This makes it much easier to analyze how PAC signing is supposed to work with trusted domains. Change-Id: I9993e5d92b7efee5aa91cd0e2005787f7d384444 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-on: https://code.wireshark.org/review/35704 Petri-Dish: Anders Broman <a.broman58@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-09Qt: remove codecs from about Wireshark dialogPascal Quantin1-21/+0
Codecs were moved to plugins in g63af1da7e7, they are no more embedded in a library. Change-Id: Id5448d2f83b1b4f7b1aac2620390f99da9327167 Reviewed-on: https://code.wireshark.org/review/35701 Reviewed-by: Pascal Quantin <pascal@wireshark.org> Petri-Dish: Pascal Quantin <pascal@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-09BGP: Add EVPN Layer 2 Attributes Extended Community (RFC 8214)Jaap Keuter1-0/+76
Bug: 16287 Change-Id: Ic76972c2c99d0206c68703bee924c0e16ffdeae7 Reviewed-on: https://code.wireshark.org/review/35702 Reviewed-by: Jaap Keuter <jaap.keuter@xs4all.nl> Petri-Dish: Jaap Keuter <jaap.keuter@xs4all.nl> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-09packet-kerberos: add a hint to the used decryption key into the proto treeStefan Metzmacher2-15/+33
This makes it much easier to understand which key is used were. Change-Id: I6f4bb1e46abb30212a87be2b574dc2679d8b7aed Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-on: https://code.wireshark.org/review/35695 Petri-Dish: Anders Broman <a.broman58@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-09packet-kerberos: re-add dissection of ntstatus (KERB_EXT_ERROR) in PA-PW-SALTStefan Metzmacher3-62/+188
We autodetect the length a 12 bytes and the 0 (4 bytes) and 1 (4 bytes) values after the 4 bytes NTSTATUS field. See [MS-KILE] 2.2.1 KERB-EXT-ERROR. Change-Id: I19345cb3f9c863e54a8f16002987912487f7d76a Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-on: https://code.wireshark.org/review/35694 Petri-Dish: Anders Broman <a.broman58@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-09NSIS: Fix a dangling output path.Gerald Combs1-0/+2
The updates to windeployqt-to-nsis.ps1 g7a09c78f12 added SetOutPath calls to qt-dll-manifest.nsh. This means we need to reset the output path before adding our translation files. Change-Id: I4b4ede72efa67cc4617aaae5baf8d38df6952df7 Reviewed-on: https://code.wireshark.org/review/35705 Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Gerald Combs <gerald@wireshark.org>
2020-01-08Netlink: remove encoding copies and, by extension, nl_data copiesJaap Keuter7-177/+136
The underlying netlink dissector sets up a data structure to help maintain information about the netlink packet. This contains the encoding information as determined for this packet. Use this value in place of the copy that every netlink dissector makes in its private data structure. As a consequence the encoding field can be removed from these private data structures. Since the encoding field is now directly available from the data structure setup by the underlying netlink dissector, the private data structures also do not need to keep a pointer to this underlying netlink dissector data structure. This change replaces the use of the local copy of encoding with the original one. This change, by extension, also removes the encoding field and the pointer to the underlying netlink dissector data structure as these are no longer needed. The exception is the generic netlink dissector, which implements the dynamic netlink famiily subdissector table. Change-Id: Ida0065379c19ae68caf6d87860828b48766c1998 Reviewed-on: https://code.wireshark.org/review/35698 Reviewed-by: Jaap Keuter <jaap.keuter@xs4all.nl> Petri-Dish: Jaap Keuter <jaap.keuter@xs4all.nl> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-08rtp_player_dialog: Route audio for a stream to left/right speaker in RTP playerJirka Novak5-27/+219
Column 'Play' added to player. Double click on a stream in the column changes audio routing for the stream. When soundcard supports only one channel, there are Mute/Play option. When soundcard supports two or more channels, there are Mute/L/L+R/R options. Muted channel is drawn with dotted line. Change-Id: If120c902195da46f98a1663c589f20c6a1da0ba7 Reviewed-on: https://code.wireshark.org/review/35687 Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-08packet-smb2: add support for SMB2_FILE_NORMALIZED_NAME_INFOStefan Metzmacher1-0/+31
Change-Id: I58d9db510181c5872be14e9feb4f35c2e6e41a39 Reviewed-on: https://code.wireshark.org/review/35595 Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
2020-01-08packet-dcerpc-netlogon: relax the data model for netlogon_auth_keyStefan Metzmacher1-70/+34
This is a change into the correct direction and allows decryption even if DCERPC security context multiplexing is not used. The final design is added as comment, which would make it possible to do decryption in all cases allowed by the protocol. Change-Id: Ided40e0028967f2a047bf2722e627800ca77054d Reviewed-on: https://code.wireshark.org/review/35680 Petri-Dish: Anders Broman <a.broman58@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-08Netlink: stop hiding packet_netlink_data pointerJaap Keuter8-230/+244
The underlying netlink dissector sets up a data structure to help maintain information about this netlink packet. It gets passed through the familiy specific netlink dissectors private data structures to reappear when support funtions of the underlying netlink dissector are needed. In the mean time a copy of data (the value 'encoding' to be precise) in this structure is also maintained in these familiy specific netlink dissectors, adding to the confusion. This change is to make the underlying netlink dissector data structure a normal part of the function interfaces, so that it is present without being dependant on another private data structure. This change is a first step towards removing the unnessesary copy of the encoding value. Change-Id: I69e78a2b15e58e149e82e89c19e519ef041ee6b1 Reviewed-on: https://code.wireshark.org/review/35688 Reviewed-by: Jaap Keuter <jaap.keuter@xs4all.nl> Petri-Dish: Jaap Keuter <jaap.keuter@xs4all.nl> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-08NSIS: Make the licensing page match reality.Gerald Combs1-6/+5
The NSIS licensing page is centered around making the user agree to a EULA. We don't have one of those. Replace the "you must accept" and "I agree" text with something more neutral. We could alternatively omit with the licensing page altogether, but the GPL is an important aspect of the project and deserves some sort of mention. Bug: 1115 Change-Id: I5fd5beac2188b61a90c2842de7d7547aa815ff4f Reviewed-on: https://code.wireshark.org/review/35624 Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-07Docs: Ensure that the API reference has the proper permissions.Gerald Combs1-1/+14
Set our file permissions before building the wsar_html_zip target. Change-Id: I660bf87891a0c8bbebfd497984617bd1d294bf10 Reviewed-on: https://code.wireshark.org/review/35685 Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Gerald Combs <gerald@wireshark.org>
2020-01-07Docbook: Fix some file permissions.Gerald Combs3-0/+0
Make the release notes and some PNGs non-executable. Change-Id: Iecd52e782258f6d7a485138f8f965b7dce52a0dc Reviewed-on: https://code.wireshark.org/review/35689 Reviewed-by: Gerald Combs <gerald@wireshark.org>
2020-01-07NSIS: Build Unicode installers / uninstallers.Gerald Combs1-0/+2
Recent versions of NSIS have deprecated ANSI installers, so enable Unicode. Change-Id: I263568f83b7f96871e056ba590db300b23dbdc80 Reviewed-on: https://code.wireshark.org/review/35681 Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Gerald Combs <gerald@wireshark.org>
2020-01-07AUTHORS: remove newlines.Dario Lombardo3-61/+25
The text is used in a Qt widget that handles the newlines itself. The change makes the text appear with a better look in the about dialog. Change-Id: I1dc9fdd1f401384f4ce2d6c2c0764adaa810a654 Reviewed-on: https://code.wireshark.org/review/35662 Reviewed-by: Guy Harris <guy@alum.mit.edu> Reviewed-by: Dario Lombardo <lomato@gmail.com>
2020-01-07dcerpc-netlogon: fix compilation with older gcrypt versions.Dario Lombardo1-1/+9
GCRY_CIPHER_MODE_CFB8 has been introduced in gcrypt 1.8.0: https://abi-laboratory.pro/?view=changelog&l=libgcrypt&v=1.8.0 Add conditional compilation code for older versions. Change-Id: I756cc118fce261a6e1a580f4a6a244c8ff0b381f Reviewed-on: https://code.wireshark.org/review/35678 Petri-Dish: Dario Lombardo <lomato@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Dario Lombardo <lomato@gmail.com>
2020-01-07BGP: update Well-known CommunitiesUli Heilmeier1-1/+10
Update the well-known communities as defined by https://www.iana.org/assignments/bgp-well-known-communities/bgp-well-known-communities.xhtml Communities for expired drafts has been ignored. Change-Id: I3dedea2bdaad8feda3c7f1d9886092d4c02d6f95 Reviewed-on: https://code.wireshark.org/review/35602 Petri-Dish: Anders Broman <a.broman58@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-07TFTP Header End FixRoman Koshelev1-2/+4
Change-Id: I70d66bb49384f2eac865a81ffc23b76362c37191 Reviewed-on: https://code.wireshark.org/review/35578 Reviewed-by: Michael Mann <mmann78@netscape.net> Petri-Dish: Michael Mann <mmann78@netscape.net> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-07NL80211: Remove global variable m_pinfo from dissectorJaap Keuter1-29/+40
The Netlink 80211 dissector has a global variable to pass the pinfo pointer to dissection routines that need it. Replace this by properly passing it to the functions via a new private data structure, akin other netlink dissectors. Change-Id: Ie08e370b65f7068c01cc93100657e3b8baa5fd63 Reviewed-on: https://code.wireshark.org/review/35657 Reviewed-by: Pascal Quantin <pascal@wireshark.org> Petri-Dish: Pascal Quantin <pascal@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-07case-sensitive: Fix casing for PCAP and WinSparkleMartin Boye Petersen2-3/+3
CMake is unable to find PCAP and WinSparkle under Windows when using case sensitive folders. Change-Id: I30ba4073afc6089b08cef3c010b09c257362929b Reviewed-on: https://code.wireshark.org/review/35505 Reviewed-by: Gerald Combs <gerald@wireshark.org> Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-07debian: remove double spaces.Dario Lombardo1-3/+3
Change-Id: Ifee8b32bbde5947944c6f3a30b5245d173beea09 Reviewed-on: https://code.wireshark.org/review/35661 Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com> Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-07Qt: Don't plot zero values in I/O scatter plotsGerald Combs3-7/+30
We don't currently distinguish between missing and zero values in I/O graphs. This can be problematic in scatter plots since the plot points tend to show up as chartjunk which overwhelms the X axis. In plain, non-calculated plots assume that zero values mean "missing" and omit those points. Describe this in the User's Guide, but comment the text out for now pending a full update to the I/O Graph section. Switch to title case in our default graphs. Make the TCP Errors graph red by default. Change-Id: I92dcbf05f58ae0b7b7734fa8dfc342424bbea114 Reviewed-on: https://code.wireshark.org/review/35645 Reviewed-by: Gerald Combs <gerald@wireshark.org> Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-07packet-smb2: handle SMB2_CHANNEL_RDMA_V1_INVALIDATE for readStefan Metzmacher1-0/+1
Change-Id: I96045fb2b07d8bae26360558f34dd6de3442ecd0 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-on: https://code.wireshark.org/review/35594 Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com> Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-07packet-smb-direct: move Flags into data_tree.Stefan Metzmacher1-1/+1
Change-Id: I919994c084d4f5702b0a6d504c8cd5a8b716498b Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-on: https://code.wireshark.org/review/35596 Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com> Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-07packet-dcerpc-netlogon: implement NETLOGON_FLAG_AES decryptionStefan Metzmacher1-14/+159
Change-Id: I2ff05f528fe8c3ab6f5407c0289064b62f3f0202 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-on: https://code.wireshark.org/review/35593 Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-07packet-dcerpc-netlogon: remove STRONGKEY related processing from get_seal_key()Stefan Metzmacher1-24/+27
This won't be needed for NETLOGON_FLAG_AES. Change-Id: I668bca15ed13e5a2767fa3e39c5cad0d510a8f5d Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-on: https://code.wireshark.org/review/35592 Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com> Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-07packet-dcerpc-netlogon: split out prepare_decryption_cipher[_strong]()Stefan Metzmacher1-11/+56
Change-Id: Ie63c2d0311be058c5694245d8576ea75d7e6bc14 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-on: https://code.wireshark.org/review/35591 Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com> Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-07packet-dcerpc-netlogon: split out uncrypt_sequence_strong()Stefan Metzmacher1-2/+16
Change-Id: Ie58377b319632c74ad61c2df42e690466b5c5608 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-on: https://code.wireshark.org/review/35590 Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com> Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-07packet-dcerpc-netlogon: use the correct NETLOGON_FLAG_AES flagStefan Metzmacher1-8/+10
See [MS-NRPC] 3.1.4.2 Netlogon Negotiable Options, it's flag W: Supports Advanced Encryption Standard (AES) encryption (128 bit in 8-bit CFB mode) and SHA2 hashing ... Change-Id: I4b677e1ca1c3b3b9bc47ccc412380cc18659fd5d Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-on: https://code.wireshark.org/review/35589 Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com> Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-07packet-dcerpc-netlogon: fix the build with DEBUG_NETLOGONStefan Metzmacher1-2/+2
Change-Id: Iab70f2847343f934864cf205569fe64cf9e98d9b Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-on: https://code.wireshark.org/review/35588 Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com> Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-07UDP: Add a filter for payload.Anders Broman5-19/+64
A filter for payload makes it easier to exoprt it. Change-Id: I0732c60c7fac37283fcbe6508d5e27bcd3c603fd Reviewed-on: https://code.wireshark.org/review/35519 Petri-Dish: Anders Broman <a.broman58@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-07rtp_player: Player is able to set start of audio play by double clickJirka Novak9-60/+212
Patch adds ability to set start of audio play by double clicking on waveform. Patch fixes unreported issue with placing waveform at incorrect place when switched relative/absolute time mode (check/uncheck Time of Day). Change-Id: Ib8ce24aea870e2443e033afbb6d6e9fbcf222431 Reviewed-on: https://code.wireshark.org/review/35621 Petri-Dish: Anders Broman <a.broman58@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-01-07rtp_analysis_dialog: Improved codec recognition during saving of audio to .auJirka Novak2-26/+34
I found that when codec is negotiated to nonstandard payload id, it was reported as unsupported even was supported. Patch fixes it. Change-Id: I4eb14fc22f83eb42300fc67baee8456dff65d191 Reviewed-on: https://code.wireshark.org/review/35575 Petri-Dish: Michael Mann <mmann78@netscape.net> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>