aboutsummaryrefslogtreecommitdiffstats
path: root/docbook
AgeCommit message (Collapse)AuthorFilesLines
2021-10-17dfilter: Require double-quoted strings with "matches"João Valverde1-0/+2
Matches is a special case that looks on the RHS and tries to convert every unparsed value to a string, regardless of the LHS type. This is not how types work in the display filter. Require double-quotes to avoid ambiguity, because matches doesn't follow normal Wireshark display filter type rules. It doesn't need nor benefit from the flexibility provided by unparsed strings in the syntax. For matches the RHS is always a literal strings except if the RHS is also a field name, then it complains of an incompatible type. This is confusing. No type can be compatible because no type rules are ever considered. Every unparsed value is a text string except if it happens to coincide with a field name it also requires double-quoting or it throws a syntax error, just to be difficult. We could remove this odd quirk but requiring double-quotes for regular expressions is a better, more elegant fix. Before: Filter: tcp matches "udp" Constants: 00000 PUT_PCRE udp -> reg#1 Instructions: 00000 READ_TREE tcp -> reg#0 00001 IF-FALSE-GOTO 3 00002 ANY_MATCHES reg#0 matches reg#1 00003 RETURN Filter: tcp matches udp Constants: 00000 PUT_PCRE udp -> reg#1 Instructions: 00000 READ_TREE tcp -> reg#0 00001 IF-FALSE-GOTO 3 00002 ANY_MATCHES reg#0 matches reg#1 00003 RETURN Filter: tcp matches udp.srcport dftest: tcp and udp.srcport are not of compatible types. Filter: tcp matches udp.srcportt Constants: 00000 PUT_PCRE udp.srcportt -> reg#1 Instructions: 00000 READ_TREE tcp -> reg#0 00001 IF-FALSE-GOTO 3 00002 ANY_MATCHES reg#0 matches reg#1 00003 RETURN After: Filter: tcp matches "udp" Constants: 00000 PUT_PCRE udp -> reg#1 Instructions: 00000 READ_TREE tcp -> reg#0 00001 IF-FALSE-GOTO 3 00002 ANY_MATCHES reg#0 matches reg#1 00003 RETURN Filter: tcp matches udp dftest: "udp" was unexpected in this context. Filter: tcp matches udp.srcport dftest: "udp.srcport" was unexpected in this context. Filter: tcp matches udp.srcportt dftest: "udp.srcportt" was unexpected in this context. The error message could still be improved.
2021-10-17TCPCLv4: Update TCPCL dissector to include version 4 from dtn-wiresharkBrian Sipos1-0/+1
Some enhancements and visual fixes to version 3 dissector are also included.
2021-10-17[Automatic update for 2021-10-17]Gerald Combs1-3/+4
Update manuf, services enterprise numbers, translations, and other items.
2021-10-15dfilter: Don't try to parse byte arrays as stringsJoão Valverde1-0/+2
It won't work with embedded null bytes so don't try. This is not an additional restriction, it just removes a hidden failure mode. To support matching embedded NUL bytes we would have to use an internal string representation other than null-terminated C strings (which doesn't seem very onerous with GString). Before: Filter: http.user_agent == 41:42:00:43 Constants: 00000 PUT_FVALUE "AB" <FT_STRING> -> reg#1 Instructions: 00000 READ_TREE http.user_agent -> reg#0 00001 IF-FALSE-GOTO 3 00002 ANY_EQ reg#0 == reg#1 00003 RETURN After: Filter: http.user_agent == 41:42:00:43 Constants: 00000 PUT_FVALUE "41:42:00:43" <FT_STRING> -> reg#1 Instructions: 00000 READ_TREE http.user_agent -> reg#0 00001 IF-FALSE-GOTO 3 00002 ANY_EQ reg#0 == reg#1 00003 RETURN
2021-10-15dfilter: Use the same semantic rules for protocols and bytesJoão Valverde1-0/+4
FT_PROTOCOL and FT_BYTES are the same semantic type, but one is backed by a GByteArray and the other by a TVBuff. Use the same semantic rules to parse both. In particular unparsed strings are not converted to literal strings for protocols. Before: Filter: frame contains 0x0000 Constants: 00000 PUT_FVALUE 30:78:30:30:30:30 <FT_PROTOCOL> -> reg#1 Instructions: 00000 READ_TREE frame -> reg#0 00001 IF-FALSE-GOTO 3 00002 ANY_CONTAINS reg#0 contains reg#1 00003 RETURN Filter: frame[5:] contains 0x0000 dftest: "0x0000" is not a valid byte string. After: Filter: frame contains 0x0000 dftest: "0x0000" is not a valid byte string. Filter: frame[5:] contains 0x0000 dftest: "0x0000" is not a valid byte string. Related to #17634.
2021-10-12Docs: Use Asciidoctor to copy ws.css.Gerald Combs3-2/+5
Use the `copycss` attribute in the release notes and FAQ to copy ws.css to the right location.
2021-10-10[Automatic update for 2021-10-10]Gerald Combs10-9/+10
Update manuf, services enterprise numbers, translations, and other items.
2021-10-10BPv7: Add Bundle Protocol version 7 and BPSec dissectors from dtn-wiresharkBrian Sipos1-0/+2
2021-10-08NEWS: tshark folders; WSUG and download page linksChuck Craft1-5/+5
2021-10-07Version: 3.5.1 → 3.7.0Gerald Combs3-3/+3
[skip ci]
2021-10-04Revert "TCP: last out-of-order packet is marked as a retransmission"Gerald Combs1-1/+1
Manually revert commit 4e3ec2d01a in order to work around a conflict with 2484ad2f72.
2021-10-04WSDG: Trivial cleanups.Darius Davis2-4/+4
Fix a bogus URL in a comment in the asn2wrs documentation. Switch a backslash in the Unix Quick Setup instructions to a slash. Insert commas in two places where they are needed.
2021-10-04Release notes: Add note about improved Reload Lua PluginsStig Bjørlykke1-0/+2
Add a note about improved Reload Lua Plugins.
2021-10-01Test: Add external tests.Gerald Combs1-1/+80
Add test/suite_external.py, which can dynamically generate tests from a configuration file. This is intended to make happy-shark useful, but it should make it easy to add simple TShark tests elsewhere. The configuration file format must currently be JSON as described in the Developer's Guide.
2021-10-01Docs+Packaging: Convert our man pages to Asciidoctor.Gerald Combs6-11/+101
Convert doc/*.pod to Asciidoctor. This: * Means we use the same markup for our man pages, the guides, and release notes. * Lets us add versions to our man pages. * Gives us more formatting options, e.g. AsciiDoc supports `commands`, nested lists and makes it easy to include version information. The manpage backend doesn't seem to support tables very well, unfortunately. Convert our CMake configuration to produce *roff and html man pages using Asciidoctor. Add a "manarg" block macro which makes our synopses wrap correctly. Similar to the release notes, guides, and FAQ, if Asciidoctor isn't found the man pages won't be generated or installed. Move Asciidoctor to the list of package build dependencies in various places. This commit includes the conversion script (pod2adoc.py), which will be removed later. Line count sanity check: Man page .pod .adoc androiddump 260 280 asn2deb 93 105 capinfos 401 471 captype 54 55 ciscodump 241 269 dftest 42 42 dpauxmon 153 169 dumpcap 464 534 editcap 528 583 etwdump 136 156 extcap 157 181 idl2deb 91 103 idl2wrs 120 100 mergecap 206 207 mmdbresolve 75 75 randpkt 107 111 randpktdump 158 184 rawshark 558 610 reordercap 76 78 sdjournal 145 157 sshdump 272 302 text2pcap 274 312 tshark 2135 2360 udpdump 133 151 wireshark-filter 486 479 wireshark 2967 3420
2021-09-30documentation: Add absolute time to user guideJohn Thacker1-0/+21
Add a description of absolute time fields to the Display Filter Field Types section and explain some of its quirks (always in local time zone, no time zone suffix, etc.) Related to #13268.
2021-09-29COSE dissector from dtn-wireshark projectBrian Sipos1-0/+1
2021-09-23Docs: Asciidoctor.js isn't yet suitable for our needs.Gerald Combs2-3/+5
Reverse the text added in cdd6f2ec80 and note that we can't yet use Asciidoctor.js to build our documentation. I'm not sure how I managed to miss this in my initial tests, but Asciidoctor.js is missing Docbook, PDF, and EPUB backends, and doesn't support Ruby macros.
2021-09-18Qt: Store Import Hex Dump settingsStig Bjørlykke1-0/+2
Store all user specified values from the "Import from Hex Dump" dialog in a profile import_hexdump.json file. Set default ExportPDU dissector to "data". Fixed a minor typo in a help text.
2021-09-14Docbook: Add changed behavior for byteviewRoland Knall1-0/+11
Add the changed hover behavior for the byteview to the documentation
2021-09-13Tools: Migrate compress-pngs.sh to Python.Gerald Combs1-1/+1
Migrate compress-pngs from a Bash script that ran Make to a Python script, which should be usable on more platforms. Add Efficient Compression Tool (ect) to the list of compressors. Add the compressors to the various *-setup.sh scripts, but comment them out for now.
2021-09-11Qt: Add Decode as Hex Digits in Show Packet BytesStig Bjørlykke1-0/+2
Non-hex character in the data are skipped, enabling the decoding to continue converting all hex digits found.
2021-09-10DOC: Remove redundancy in build instructions.Berk Akinci3-105/+77
Consolidate build instructions and troubleshooting into WSDG chapter 2. Remove (moved) troubleshooting note that libpcap is required. Link from WSUG build instructions to the WSDG chapters. Reorder WSUG to have install instructions before build instructions for both Windows and Unix. Link from WSDG build instructions in WSDG sources chapter back to WSDG chapter 2. Offer options to the 'git clone' lines in obtaining sources: '--depth' and '--shallow-since' Add brief descriptions of new options mentioned.
2021-09-07Windows: upgrade Npcap to 1.55Pascal Quantin1-1/+1
2021-09-01CMake: Get rid of WS_PROGRAM_PATHGerald Combs1-1/+1
Use the $<TARGET_FILE_DIR:tshark> generator expression instead.
2021-08-31Fix broken release notes caused by !3048Peter van der Perk1-0/+3
2021-08-31ISO10681: Adding support for ISO10681 (FlexRay ISO TP)Dr. Lars Völker1-0/+1
This patch adds support for the ISO 10681-2 protocol, which is similar to the ISO 15765-2 protocol (see packet-iso15765.c). This patch also add support for registering combined FlexRay IDs to register the new dissector.
2021-08-29[Automatic update for 2021-08-29]Gerald Combs9-9/+9
Update manuf, services enterprise numbers, translations, and other items.
2021-08-27Some spelling fixes.Martin Mathieson2-3/+3
2021-08-27Version: 3.5.0 → 3.5.1.Gerald Combs1-1/+1
2021-08-27Build: 3.5.0.Gerald Combs1-2/+4
[skip ci]
2021-08-27CMake: Use "'" instead of "’" in our guide filenames.Gerald Combs1-2/+2
Use an apostrophe instead of RIGHT SINGLE QUOTATION MARK in our PDF and EPUB filenames. Some programs (notably Okular) can't open filenames with extended characters, at least on Windows.
2021-08-27Release notes: Various updates.Gerald Combs1-11/+17
Add 64-bit PortableApps and macOS Arm items. Fix an issue from a previous commit. Add new dissectors.
2021-08-25FAQ: Add items about forms and contracts.Gerald Combs1-27/+43
We occasionally get requests to fill in compliance forms and to sign contracts. Add items for those. Move the name change question to a historical intrest section.
2021-08-25Qt: Add Turkey translationAlexis La Goutte1-0/+4
Thanks to Serkan ÖNDER
2021-08-20Fix some docbook spellings.Martin Mathieson2-4/+4
2021-08-19Added HiPerConTracer dissector.Thomas Dreibholz1-0/+1
2021-08-18Updated release notesJirka Novak1-0/+2
2021-08-03Docs: Give the PDF and EPUB guides descriptive filenames.Gerald Combs1-8/+12
Use the document title for our PDF and EPUB filenames under the theory that "Wireshark User’s Guide.pdf" is more obvious than "user-guide.pdf".
2021-08-03EPUB: Replace cover pagesJaap Keuter2-0/+0
2021-08-03EPUB: Add cover page and some document meta dataJaap Keuter4-0/+20
If only someone could create a proper cover page
2021-08-02A few documentation spelling fixes.Martin Mathieson2-8/+8
2021-07-30Docs: Add epub targets for the guides.Gerald Combs1-0/+24
Add user_guide_epub and developer_guide_epub targets that generate EPUB versions of the User's Guide and Developer's Guide. Ping #17494.
2021-07-30Release notes: Add an item about GSoD 2020.Gerald Combs1-0/+2
2021-07-23Fix duplicated prepositionPiotrek Żygieło1-2/+2
2021-07-21First pass pinfo->pool conversionEvan Huus1-1/+1
Automated find/replace of wmem_packet_scope() with pinfo->pool in all files where it didn't cause a build failure. I also tweaked a few of the docs which got caught up.
2021-07-18[Automatic update for 2021-07-18]Gerald Combs2-4/+4
Update manuf, services enterprise numbers, translations, and other items.
2021-07-16BLF: Support for BLF file formatDr. Lars Völker1-0/+1
This patch adds first support for the BLF file format.
2021-07-16docbook: Fix our admon image widths.Gerald Combs1-36/+40
Set a minimum width for our admonition graphics. Otherwise some browsers make them tiny. Fixes #17473. Fix was done via https://github.com/geraldcombs/asciidoctor-stylesheet-factory/commit/420a8a3d7c431c232f1e8dc18a9f7b947fd270df which also pulls in upstream CSS fixes.
2021-07-14LIN: Adding support for LIN dissectionDr. Lars Völker1-0/+1
This patch adds support for LIN (Local Interconnect Network) as well as support for: - Signal PDUs on LIN - ISO 15765 (ISO TP) on LIN - TECMP transported LIN is handle like LIN LIN is a simple automotive fieldbus to connect for example simple sensors and actuators to an electronic control unit.