aboutsummaryrefslogtreecommitdiffstats
path: root/doc
AgeCommit message (Collapse)AuthorFilesLines
2018-12-13text2pcap: allow to set interface nameJaap Keuter1-0/+6
When generating a capture file from a text file it can be helpfull to be able to set the capture interface name in the generated IDB. This can be especially true if later on the generated captures are merged and the individual IDB's have to be compared. Without a name every IDB of the same datalink type will be equal and subject to merge. Also it keeps the individual streams identifiable for the end user. Change-Id: I70224379d88f516a0a356bf0b46aebafb69665f0 Signed-off-by: Jaap Keuter <jaap.keuter@xs4all.nl> Reviewed-on: https://code.wireshark.org/review/31015 Tested-by: Petri Dish Buildbot Reviewed-by: Peter Wu <peter@lekensteyn.nl>
2018-12-07PCAP/PCAPNG: Be consistent in documentation, etcJaap Keuter4-39/+39
1) The default build configuration is to select PCAPNG as output format, but it can be selected as PCAP. Some of the command line tools have the option to select the output format and default towards the build configuration. This has to be reflected in their help output also. 2) Various documentation files are still stating that PCAP is the default format of various tools. With the default build configuration being PCAPNG these have to be adjusted as well. (with lack of dynamic content the documentation can only refer to the default build configuration format). Change-Id: I51d19642a7ed8c99817971c1f25d20972095021e Signed-off-by: Jaap Keuter <jaap.keuter@xs4all.nl> Reviewed-on: https://code.wireshark.org/review/30951 Petri-Dish: Anders Broman <a.broman58@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-12-06Doc: add mentioning of ip link to get interfacesJaap Keuter3-3/+3
With the introduction of the ip command (from iproute2) on modern Linux systems it becomes common to see this tool available, gradually replacing tools like netstat and ifconfig. Change-Id: I1fb309e741c07c93271b61a35c4833d36bcc5cb8 Signed-off-by: Jaap Keuter <jaap.keuter@xs4all.nl> Reviewed-on: https://code.wireshark.org/review/30924 Petri-Dish: Anders Broman <a.broman58@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-12-03CMake: Simplify CMAKE_INSTALL_DATADIR usageJoão Valverde1-1/+1
Change-Id: I414aa551b8e9315a654f4da62b882e787d4f6d53 Reviewed-on: https://code.wireshark.org/review/30904 Petri-Dish: João Valverde <j@v6e.pt> Tested-by: Petri Dish Buildbot Reviewed-by: João Valverde <j@v6e.pt>
2018-12-02[Automatic update for 2018-12-02]Gerald Combs3-4/+4
Update manuf, services enterprise numbers, translations, and other items. Change-Id: Idfe3eaa6b9abd2337590a09972ce44266c2893ca Reviewed-on: https://code.wireshark.org/review/30880 Reviewed-by: Gerald Combs <gerald@wireshark.org>
2018-11-24plugins.example: Fix build on WindowsJoão Valverde2-8/+9
Change-Id: I30798a697bc14076cc3bd9e224714a6a3567046b Reviewed-on: https://code.wireshark.org/review/30774 Reviewed-by: João Valverde <j@v6e.pt>
2018-11-21Update text2pcap documentationJaap Keuter1-4/+6
Various parts of the text2pcap documentation need some fixing up. This change brings them back in line and up to date with current features. Change-Id: I038cf5c4943d2a4bbcc3d0fbd8f5e111dcf0d0a9 Signed-off-by: Jaap Keuter <jaap.keuter@xs4all.nl> Reviewed-on: https://code.wireshark.org/review/30754 Tested-by: Petri Dish Buildbot Reviewed-by: Peter Wu <peter@lekensteyn.nl>
2018-11-20editcap: add --inject-secrets optionPeter Wu1-0/+15
Add a new option to insert decryption secrets into a pcapng file. Change-Id: I0e024585cac9a8a328e88d32f9eb03d37d350e2a Ping-Bug: 15252 Reviewed-on: https://code.wireshark.org/review/30693 Petri-Dish: Peter Wu <peter@lekensteyn.nl> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-11-16Man pages: Update pipe input documentation.Gerald Combs3-17/+16
Make sure the -i <pipe> documentation is consistent and correct. Change-Id: I9019effb658f914ac754e4ae893eafbe7c4b4da1 Reviewed-on: https://code.wireshark.org/review/30675 Reviewed-by: Gerald Combs <gerald@wireshark.org>
2018-11-13tshark: Print the packets' comments in the expert infoVasil Velichkov1-1/+1
Previously 'tshark -z expert' was failing with abort when a packet contains a comment - Add a new comment parameter and update the tshark's manual page - Add a new comment_level severity and change the default lavel to it. - Add various 'tshark -z expert' tests Change-Id: I188317da5e00019b8f2b725f0fe84942f774520f Reviewed-on: https://code.wireshark.org/review/30610 Petri-Dish: Guy Harris <guy@alum.mit.edu> Tested-by: Petri Dish Buildbot Reviewed-by: Guy Harris <guy@alum.mit.edu>
2018-11-09Dumpcap+Qt: Add support for `-a packets:NUM` and `-b packets:NUM`.Gerald Combs3-27/+46
Add the ability to rotate files after a specified number of packets (`-b packets:NUM`). Move some condition checks to capture_loop_write_packet_cb. Add `-a packets:NUM` in order to be consistent. It is functionally equivalent to the `-c` flag. Add a corresponding "packets" option to the Capture Interfaces dialog Output tab. Add initial tests for autostop and ringbuffer conditions. Change-Id: I66eb968927ed287deb8edb96db96d7c73526c257 Reviewed-on: https://code.wireshark.org/review/30534 Reviewed-by: Gerald Combs <gerald@wireshark.org> Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-11-01Move condition logic to dumpcap.cGerald Combs4-10/+9
Move the condition logic from capture_stop_conditions.c to dumpcap.c. Remove capture_stop_conditions.[ch] and conditions.[ch]. Switch duration values to doubles. Change-Id: Ifa74fb13ec8fc923b0721597a6cf071d72069ea0 Reviewed-on: https://code.wireshark.org/review/30440 Reviewed-by: Gerald Combs <gerald@wireshark.org> Petri-Dish: Gerald Combs <gerald@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-10-27Update plugins.example/READMEJoão Valverde1-4/+4
Change-Id: Ib428859b75e1c196cf9fa81ebae4969bbce079f2 Reviewed-on: https://code.wireshark.org/review/30396 Reviewed-by: João Valverde <j@v6e.pt>
2018-10-27Add support for extended 64 bit value to string matchingTom Hughes1-0/+19
This adds val64_string_ext to parallel value_string_ext in the same way that val64_string parallels value_string. Change-Id: Iadbfc49f5a4540000ed92fd0469e8d273911e97e Reviewed-on: https://code.wireshark.org/review/30385 Petri-Dish: Peter Wu <peter@lekensteyn.nl> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-10-21tap-follow: fix memory leakVasil Velichkov1-5/+9
Register the follow_free as a finish callback. Call the tap's finish callback in free_tap_listener which is called from both remove_tap_listener and tap_cleanup. Describe the finish callback in README.tapping Change-Id: Ie79ce8f39b0ca6d84810d2e3307dcff38b18d3ac Reviewed-on: https://code.wireshark.org/review/29309 Reviewed-by: Peter Wu <peter@lekensteyn.nl> Petri-Dish: Peter Wu <peter@lekensteyn.nl> Tested-by: Petri Dish Buildbot Reviewed-by: Michael Mann <mmann78@netscape.net>
2018-10-19Documentation fix.Michal Slavka1-9/+10
Change-Id: I139f54f6eb62a82d3b31738966cade02d5a7c7b1 Reviewed-on: https://code.wireshark.org/review/30243 Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
2018-10-05*shark: Update help and manpage for name resolvingUli Heilmeier3-0/+6
Add 'v' option for VLAN ID resolving and get rid of deprecated 'C' option. Bug: 14826 Change-Id: I63104f4a465d251048693ad02882ea7eb2c4d926 Reviewed-on: https://code.wireshark.org/review/30029 Petri-Dish: Anders Broman <a.broman58@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-10-01Add a systemd Journal Export extcap.Gerald Combs2-0/+157
Add an sdjournal extcap, which reads journal entries using the sd-journal API and dumps them as journal Export Format records. Change-Id: I17ccfa88ab5d053c16c869cd26e580d84022502e Reviewed-on: https://code.wireshark.org/review/29479 Reviewed-by: Gerald Combs <gerald@wireshark.org> Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Peter Wu <peter@lekensteyn.nl> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-09-13Start renaming SSL to TLS.Gerald Combs2-5/+5
Rename the "ssl" protocol to "tls" and add an "ssl" alias. Prefer "TLS" over "SSL" in user interface text and in the documentation. Fix the test_tls_master_secret test while we're here. Bug: 14922 Change-Id: Iab6ba2c7c4c0f8f6dd0f6d5d90fac5e9486612f8 Reviewed-on: https://code.wireshark.org/review/29649 Petri-Dish: Gerald Combs <gerald@wireshark.org> Reviewed-by: Peter Wu <peter@lekensteyn.nl> Tested-by: Petri Dish Buildbot Reviewed-by: Gerald Combs <gerald@wireshark.org>
2018-09-09Remove the tshark -z compare featureJoão Valverde1-5/+0
- It cannot support IPv6. - Non-standard use (specifically recommended against in the RFCs) of the IPv4 fragment ID field. - Has a narrow and non-obvious use case, IMO. - It is not supported in the Qt GUI. - Significant maintenance burden for an obscure feature. Change-Id: Icaf429269dc42f78c38b8d20001508132499faf8 Reviewed-on: https://code.wireshark.org/review/29239 Reviewed-by: Peter Wu <peter@lekensteyn.nl> Petri-Dish: Peter Wu <peter@lekensteyn.nl> Tested-by: Petri Dish Buildbot Reviewed-by: João Valverde <j@v6e.pt>
2018-09-08Build the dpauxmon documentation.Gerald Combs1-0/+12
Add dpauxmon entries to the doc targets. Change-Id: I7a9ac76897c770892a9eac3c2de5da626e3f7ac4 Reviewed-on: https://code.wireshark.org/review/29466 Reviewed-by: Gerald Combs <gerald@wireshark.org> Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-08-31editcap: add seed optionNils Björklund1-0/+5
Implement a --seed option to be used in conjunction with -E. The option allows the user to set the seed for the pseudo-random number generator, which can be useful for recreating a particular sequence of errors. Change-Id: Id427ab5fd7711652ad56c72271b2e0acb7380858 Reviewed-on: https://code.wireshark.org/review/29306 Reviewed-by: Gerald Combs <gerald@wireshark.org> Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-08-31Update README.vagrantJoão Valverde1-26/+36
Change-Id: I87fc8e98bd189052255b65a1a08591d175d31e3f Reviewed-on: https://code.wireshark.org/review/29362 Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-08-25CMake: Modernize config-file package supportJoão Valverde1-22/+5
A CMake config-file package provides support for downstreams using CMake and Wireshark libraries to easily configure the libwireshark dependency with: find_package(Wireshark CONFIG [REQUIRED]) target_link_libraries(foo epan) The FindWireshark.cmake file is no longer needed. See cmake-package(7) for more details on CMake's package system. Change-Id: Ie8af1d44417a99dd08d37959f7b2ffca88572ec2 Reviewed-on: https://code.wireshark.org/review/29208 Petri-Dish: João Valverde <j@v6e.pt> Tested-by: Petri Dish Buildbot Reviewed-by: João Valverde <j@v6e.pt>
2018-08-21Fix comment.João Valverde1-3/+2
Change-Id: Ib41b9a84333a3d3d34ae9c0797dbae10141f9e53 Reviewed-on: https://code.wireshark.org/review/29235 Reviewed-by: João Valverde <j@v6e.pt>
2018-08-21plugins: Minor interface improvementJoão Valverde2-3/+4
Change the plugin compatibility check to make it more convenient to define and check the major.minor Wireshark version. Change-Id: I2a6d2a746682c29504311cce5c457e0a852c3daf Reviewed-on: https://code.wireshark.org/review/29224 Petri-Dish: João Valverde <j@v6e.pt> Tested-by: Petri Dish Buildbot Reviewed-by: João Valverde <j@v6e.pt>
2018-08-21plugins: Fix CMake build exampleJoão Valverde1-15/+12
Fix combination of pkg-config and CMake variables for feature detection. Remove non-system installation option. Just copy it manually for now. Change-Id: Ia80c703c6ec3df0a49f8d56f1bd6da69471c523f Reviewed-on: https://code.wireshark.org/review/29223 Petri-Dish: João Valverde <j@v6e.pt> Tested-by: Petri Dish Buildbot Reviewed-by: João Valverde <j@v6e.pt>
2018-08-18Docs: AUTHORS formatting updates.Gerald Combs1-68/+26
Switch the AUTHORS heading markup from underscores to equals. This makes it easier to transform to Pod headings. Update the AUTHORS-SHORT-FORMAT output so that the author lists are verbatim paragraphs. Add a style for the author lists instead of wrapping everything in a <pre>. The AUTHORS files are UTF-8 and wireshark.pod sets "=encoding utf8". There's no need to translate characters. Change-Id: I43cf18ff86774421b08edb84d968a9410be177fe Reviewed-on: https://code.wireshark.org/review/29181 Reviewed-by: Gerald Combs <gerald@wireshark.org> Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-08-18Docs: Make our Pod documentation encoding uniform.Gerald Combs23-0/+115
We've set "=encoding utf8" in wireshark.pod for a long time. Do so in the rest of our .pod files. Change-Id: I3ef0fb3a88ed63275b4ff4362b6afbf13d79a0bc Reviewed-on: https://code.wireshark.org/review/29182 Reviewed-by: Gerald Combs <gerald@wireshark.org> Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
2018-08-06editcap: Add ability to skip radiotap header.Alexis Green1-0/+11
This is useful when processing packets that were captured by multiple radios on the same channel. Change-Id: I9dacc35294a4ed4e817014e563e7c9a54ee05e40 Reviewed-on: https://code.wireshark.org/review/28843 Reviewed-by: Peter Wu <peter@lekensteyn.nl> Petri-Dish: Peter Wu <peter@lekensteyn.nl> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-07-13extcap: Create docbook documentationRoland Knall1-428/+0
Move the information from README.extcap into docbook. Change-Id: Ic6504787750d04fe6c66479896cba8d6148d804d Reviewed-on: https://code.wireshark.org/review/28690 Reviewed-by: Roland Knall <rknall@gmail.com> Reviewed-by: Jaap Keuter <jaap.keuter@xs4all.nl>
2018-07-02Add new encoding names for seconds/{micro,nano}second time stamps.Guy Harris1-8/+15
Add ENC_TIME_SECS_NSECS and ENC_TIME_SECS_USECS; they make it more explicit (especially to those not familiar with UN*X data types) what the representation is, allow for ENC_TIME_SECS_MSECS etc. if they're needed, and match names such as ENC_TIME_SECS and ENC_TIME_MSECS. Change-Id: I6ab36fb4da70563587141cd65ffff8523477b0c4 Reviewed-on: https://code.wireshark.org/review/28564 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2018-07-01randpktdump: add --delay optionPeter Wu1-5/+16
For testing live capture mode in the Qt UI, it is useful to have a continous capture source with some dummy packets. Change-Id: Id76ecbf24828dd3212b208c96679524e4c25b00f Reviewed-on: https://code.wireshark.org/review/28537 Petri-Dish: Peter Wu <peter@lekensteyn.nl> Tested-by: Petri Dish Buildbot Reviewed-by: Dario Lombardo <lomato@gmail.com> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-05-23Expand doc/pugins.example README a bit.João Valverde1-5/+9
Change-Id: Ife25fe9aaa333ffcdce3f2a48faed565dc83aebf Reviewed-on: https://code.wireshark.org/review/27746 Reviewed-by: João Valverde <j@v6e.pt>
2018-05-23Fixups to doc/plugins.example buildJoão Valverde1-2/+6
Set symbol visibility properly. Add -Wall -Wextra GCC flags that were there previosuly. Remove duplicate -I compiler flags. Remove useless "hello_EXPORTS" definition while at it. Change-Id: Iac173f02e41b3b4f2999e5d71b95b910a9c2da11 Reviewed-on: https://code.wireshark.org/review/27744 Reviewed-by: João Valverde <j@v6e.pt>
2018-05-22Convert doc/plugins.example to use CMakeJoão Valverde4-76/+57
Change-Id: Ic290249569ea9bb435638a9cabd4d87ac7ef9323 Reviewed-on: https://code.wireshark.org/review/27699 Reviewed-by: João Valverde <j@v6e.pt>
2018-05-21Restore doc/plugins.example Makefile.amJoão Valverde1-0/+34
This file was erroneously removed in 4a156da068269aae75d79cd08e579754c52a0c43. This file is not part of Wireshark's (the application) build system. We may want to convert the example to use CMake instead (purely for consistency) but until then configure.ac and Makefile.am are required files. Change-Id: I7902ff71a44bba798e8dc7083103d4785095b374 Reviewed-on: https://code.wireshark.org/review/27684 Reviewed-by: João Valverde <j@v6e.pt>
2018-05-14extcap: Support for DisplayPort AUX channel monitorsDirk Eibach1-0/+148
Support for the generic netlink DisplayPort AUX channel monitor kernel driver. Change-Id: Iab445229ecef082968355f604993292f5f2d8d69 Reviewed-on: https://code.wireshark.org/review/27313 Petri-Dish: Dario Lombardo <lomato@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Dario Lombardo <lomato@gmail.com> Reviewed-by: Roland Knall <rknall@gmail.com>
2018-05-08extcap: Group argumentsRoland Knall1-7/+7
Group arguments together to better present them, as well as to have the possibility to better facilitate settings categories. The order of tabs is defined by the numbering of arguments and their appearance. If no tab can be found or no group has been defined for the argument, a default tab will be added. Change-Id: I032881193e09d4ad5d65c9f73fede87695acdace Reviewed-on: https://code.wireshark.org/review/27054 Petri-Dish: Roland Knall <rknall@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Roland Knall <rknall@gmail.com>
2018-05-02Test: Remove the Bash test scripts.Gerald Combs1-1/+1
They've been replaced by the Python scripts. Change-Id: I8add9c9ea0a6bdd68b2fa3841977863c0ea9a761 Reviewed-on: https://code.wireshark.org/review/27243 Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-04-25Document "len" and "count" in wireshark-filter(4) and WSUGPeter Wu1-0/+2
Add missing section on display filter functions to WSUG and make it consistent with the wireshark-filter(4) manual. "count" was added in Wireshark 1.12 (bug 9480). "len" was added in Wireshark 1.6.x. "size" (added in 1.8.x) is not documented since it works like "len", except that it is not limited to strings and byte arrays. I think that "len" should be extended to other types while removing "size". Change-Id: I2c8e2b4a11f007de7852a797bed971af86840b47 Reviewed-on: https://code.wireshark.org/review/27146 Petri-Dish: Peter Wu <peter@lekensteyn.nl> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-04-25Remove some references to autotools from developer documentation.Guy Harris1-2/+2
Change-Id: I4c95e56e067eed98d269812225256462dfa46273 Reviewed-on: https://code.wireshark.org/review/27140 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2018-04-25Get rid of a no-longer-needed README file.Guy Harris1-21/+0
Now that we only support CMake, that file would be reduced to Wireshark is built using CMake. which doesn't justify keeping it around. Change-Id: I07d0ce0689ab274fd6c7dff3d8e5a8b31e110cbb Reviewed-on: https://code.wireshark.org/review/27139 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2018-04-19tshark: prepend tshark to all examples in doc.Dario Lombardo1-20/+20
The doc has a mixed way of providing example, both without executable name and with it. Add it to all the provided examples. Add highlight of tshark in examples, too. Change-Id: I99d83201cc897629f186aabd20c0add9c7c53b93 Reviewed-on: https://code.wireshark.org/review/27034 Petri-Dish: Peter Wu <peter@lekensteyn.nl> Tested-by: Petri Dish Buildbot Reviewed-by: Peter Wu <peter@lekensteyn.nl>
2018-04-19tshark: improve -G elastic-mapping command by adding filters.Dario Lombardo1-2/+15
The generated elastic mapping file is huge and it can hassle softwares like Kibana. This change adds the ability to append desired filters that will appear in the mapping file. This change adds the option --elastic-mapping-filter <protocols> to tshark. Example: tshark -G elastic-mapping --elastic-mapping-filter ip,udp,dns make only those 3 protocols to appear in the mapping file. Change-Id: Ie2dcd6e44be2d084e8e50cd6554bd90178da4e38 Reviewed-on: https://code.wireshark.org/review/27001 Reviewed-by: Peter Wu <peter@lekensteyn.nl> Petri-Dish: Peter Wu <peter@lekensteyn.nl> Tested-by: Petri Dish Buildbot Reviewed-by: Dario Lombardo <lomato@gmail.com>
2018-04-18tshark: add -G elastic-mapping report.Dario Lombardo1-0/+6
This option generates an ElasticSearch mapping file as described here: https://www.elastic.co/blog/analyzing-network-packets-with-wireshark-elasticsearch-and-kibana It leverages the Glib-json library. Change-Id: Iff25f991e87d3da07bf06654e353fb785799dde9 Reviewed-on: https://code.wireshark.org/review/26848 Petri-Dish: Dario Lombardo <lomato@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Peter Wu <peter@lekensteyn.nl> Reviewed-by: Dario Lombardo <lomato@gmail.com>
2018-04-18dfilter: make spaces around ".." optional in display filterPeter Wu1-2/+2
For numeric values such as port numbers, "4430..4434" looks more natural than "4430 .. 4434", so support that. To make this possible, the display filter syntax needs to be restricted. Assume that neither field names nor values can contain "..". The display filter `data contains ..` will now be considered a syntax error and must be written as `data contains ".."` instead. More generally, all values that contain ".." must be quoted. Other than the ".." restriction, the scanner deliberately accepts more characters that can potentially form invalid input. This is to prevent accidentally splitting input in multiple tokens. For example, "9.2." in "frame.time_delta in {9.2.}" is currently parsed as one token and then rejected because it cannot be parsed as time. If the scanner was made stricter, it could treat it as two tokens (floats), "9." and "2." which has different meaning for the set membership operator. An unhandled edge case is "1....2" which is parsed as "1 .. .. 2" but could have been parsed as "1. .. .2" instead. A float with trailing dots followed by ".." seems sufficiently weird, so rejection is fine. Ping-Bug: 14180 Change-Id: Ibad8e851b49346c9d470f09d5d6a54defa21bcb9 Reviewed-on: https://code.wireshark.org/review/26960 Petri-Dish: Peter Wu <peter@lekensteyn.nl> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-04-18dfilter: add range support to set membership operator ("f in {x .. y}")Peter Wu1-0/+10
Allow "tcp.srcport in {1662 1663 1664}" to be abbreviated to "tcp.srcport in {1662 .. 1664}". The range operator is supported for any field value which supports the "<=" and "=>" operators and thus works for integers, IP addresses, etc. The naive mapping "tcp.srcport >= 1662 and tcp.srcport <= 1664" is not used because it does not have the intended effect with fields that have multiple occurrences (e.g. tcp.port). Each condition could be satisfied by an other value. Therefore a new DVFM instruction (ANY_IN_RANGE) is added to test the range condition against each individual field value. Bug: 14180 Change-Id: I53c2d0f9bc9d4f0ffaabde9a83442122965c95f7 Reviewed-on: https://code.wireshark.org/review/26945 Petri-Dish: Peter Wu <peter@lekensteyn.nl> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-04-18Remove autotools build system.Dario Lombardo6-480/+14
It has been replaced by cmake. Change-Id: I83a5eddb8645dbbf6bca9f026066d2e995d8e87a Reviewed-on: https://code.wireshark.org/review/26969 Petri-Dish: Dario Lombardo <lomato@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Gerald Combs <gerald@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-04-15dfilter-test.py: document parallelization supportPeter Wu1-3/+10
Tests are independent and can be run in parallel using pytest-xdist (https://github.com/pytest-dev/pytest-xdist), document it. While at it, allow running the tests from other directories. Change-Id: I3e55c549669f7d59d35cd64eca53680cea6dec2d Reviewed-on: https://code.wireshark.org/review/26943 Reviewed-by: Peter Wu <peter@lekensteyn.nl> Petri-Dish: Peter Wu <peter@lekensteyn.nl> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>