aboutsummaryrefslogtreecommitdiffstats
path: root/epan
AgeCommit message (Collapse)AuthorFilesLines
2016-03-24Add basic PIDL MakefileJoão Valverde49-3757/+166
Change-Id: I8f4c8e312df73b70f3cacd0df768375b46197ae6 Reviewed-on: https://code.wireshark.org/review/14507 Petri-Dish: João Valverde <j@v6e.pt> Reviewed-by: João Valverde <j@v6e.pt> Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
2016-03-24GTPv2: Fix length of Presence Reporting Area Identifier fieldUli Heilmeier1-5/+5
Specs (http://www.etsi.org/deliver/etsi_ts/129200_129299/129274/13.04.00_60/ts_129274v130400p.pdf , page 281 ) lists 3 Bytes for field Presence Reporting Area Identifier. Bug: 12284 Change-Id: I404c5133fa0975b5c9a245b8e4b952c7eb4d2818 Reviewed-on: https://code.wireshark.org/review/14608 Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
2016-03-24MySQL: Decoding of the header of compressed packetsDaniël van Eeden1-1/+68
If client and server have the flag set then compression starts after the greeting,login,ok. This comments makes it possible to decode packets which use the compressed protocol but don't have an compressed payload. Ping-Bug: 10342 Change-Id: I710f655c86feb9770556d1ffa69edd728e0374c3 Reviewed-on: https://code.wireshark.org/review/14603 Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com> Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Michael Mann <mmann78@netscape.net>
2016-03-24Add support in order to dissect the GTPv2 IE "Presence Reporting Area ↵Lucas Simopoulos1-1/+27
Information" Change-Id: Ibe25fd95a5020b1663c096b5e35a04587821d71e Reviewed-on: https://code.wireshark.org/review/14604 Petri-Dish: Pascal Quantin <pascal.quantin@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
2016-03-24Add files by folder to distribution tarball (EXTRA_DIST)João Valverde1-1/+2
This takes away much of the pain (and merge conflicts) of micro-managing every sub-folder file. Change-Id: I7d7bb1173511ec9312ca4a97c6a59a26b0b194f4 Reviewed-on: https://code.wireshark.org/review/14595 Petri-Dish: João Valverde <j@v6e.pt> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: João Valverde <j@v6e.pt>
2016-03-24Remove constant variable (CID-280372)Jaap Keuter1-12/+1
This copied and stripped code has this variable which does not change. Remove this constant variable and the conditional statements related. Change-Id: I0741ef0ef8b8d1cbd52fc521bc6a91ad06c8b597 Reviewed-on: https://code.wireshark.org/review/14594 Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com> Petri-Dish: Pascal Quantin <pascal.quantin@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Michael Mann <mmann78@netscape.net>
2016-03-24Detect spurious retransmissions when the full segment is retransmittedMichael Cistera1-3/+3
The TCP dissector failed to recognize spurious retransmissions when the last ack exactly equaled the retransmitted packet's sequence number plus the len. This is standard TCP behavior so this feature was broken in most cases. Bug: 12282 Change-Id: I90196cc79e786f92fd0d7be32816aad1d69d5718 Reviewed-on: https://code.wireshark.org/review/14592 Reviewed-by: Jeff Morriss <jeff.morriss.ws@gmail.com>
2016-03-233GPP NAS: upgrade dissector to v13.5.0Pascal Quantin1-6/+6
Change-Id: I454a6a07efe599924edcfd2a5adeeabaf902995b Reviewed-on: https://code.wireshark.org/review/14605 Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
2016-03-23Update MySQL protocol URLDaniël van Eeden1-2/+1
Change-Id: Ia50e06f8e9387ccb5e413f9a77fa811f092cb34a Reviewed-on: https://code.wireshark.org/review/14602 Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
2016-03-23Fix typo.Guy Harris1-1/+1
Change-Id: Ia7a94a855a2a7fe184232fea73874a607c4141b2 Reviewed-on: https://code.wireshark.org/review/14598 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-03-23Mikrotik has a protocol that they name Ethernet over IP (EoIP) which hasJoerg Mayer3-31/+34
nothing to do with IP protocol 97 called EoIP. Instead it is a GRE encapsulation with Ethertype 0x6400. It sets the GRE version to 1 but doesn't use a sequence number (in violation of RFC2637). Welcome to the real world. Change-Id: I3d916f8fc134ef14bcaf0b946a10f7170a9f6a75 Reviewed-on: https://code.wireshark.org/review/14596 Reviewed-by: Jörg Mayer <jmayer@loplof.de>
2016-03-23MySQL: Fix typo on CAPS_UNUSED #defineAlexis La Goutte1-1/+1
Change-Id: I4b4a5e6ca0b10068075767e6eec95c97d32034a1 Reviewed-on: https://code.wireshark.org/review/14561 Reviewed-by: Daniël van Eeden <wireshark@myname.nl> Reviewed-by: Michael Mann <mmann78@netscape.net>
2016-03-23Remove some dead code in copied code (CID-280297)Jaap Keuter1-28/+1
The copied function retained features from its parent, which cannot be reached. Might as well remove them and replace with proper assert. Change-Id: I63838d6011420d6c4473b127da52e7f304376172 Reviewed-on: https://code.wireshark.org/review/14531 Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com> Petri-Dish: Pascal Quantin <pascal.quantin@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Michael Mann <mmann78@netscape.net>
2016-03-23Fix whitespace.Guy Harris1-4/+4
Change-Id: I9ec492c90e22813f6336130a875b9bca7179af6a Reviewed-on: https://code.wireshark.org/review/14580 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-03-23Expand the LAT dissection.Guy Harris1-146/+1718
Base it on the DEC specification, not on whatever the Linux DECNET people managed to reverse-engineer. Change-Id: I60586f52e35f9f61e4aed93f315bfaceebe68cce Reviewed-on: https://code.wireshark.org/review/14579 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-03-23Add pkg.m4 and remove aclocal-flags scriptJoão Valverde1-2/+0
Add pkg-config 0.29.1 macros to our distribution. This makes the aclocal-flags script obsolete, since we are already not using GLib autoconf macros. ACLOCAL_AMFLAGS need only be defined on the top-level Makefile.am. Change-Id: Idd868dcfeb8f279517970d0f96d9d53e3a7e4d5c Reviewed-on: https://code.wireshark.org/review/14568 Reviewed-by: João Valverde <j@v6e.pt>
2016-03-22More "FT_BOOLEAN is 64-bit" fixes.Guy Harris1-1/+1
Bug: 12276 Change-Id: I705b79073856cfb49c05d83014a3b9f50d2e30cf Reviewed-on: https://code.wireshark.org/review/14556 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-03-22ISO 7816: fix filters for Fi and Di fieldsPascal Quantin1-2/+2
They use proto_tree_add_uint_format() function to build an interpreted value, so they should not apply the byte bitmask Change-Id: I29f70f567d41a8a44a34f3f0bc477fbc04b11b29 Reviewed-on: https://code.wireshark.org/review/14553 Reviewed-by: Martin Kaiser <wireshark@kaiser.cx>
2016-03-22Remove more missed ADNS codeJoão Valverde1-60/+0
Fixup for 7a1d3f67ac83e12645a91b5329b6e8163954f77e. Change-Id: Idb8d68a3cc114545f24738cead4968804d831346 Reviewed-on: https://code.wireshark.org/review/14548 Petri-Dish: João Valverde <j@v6e.pt> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Michael Mann <mmann78@netscape.net>
2016-03-21Remove ADNS supportJoão Valverde6-140/+7
Relevant mailing list message: https://www.wireshark.org/lists/wireshark-dev/201503/msg00007.html Change-Id: I0cff6d4d64fb52a651bcf6b28c183e43653b1cc2 Reviewed-on: https://code.wireshark.org/review/14519 Reviewed-by: João Valverde <j@v6e.pt>
2016-03-21Bugfix "typo" from I9b04837f93Michael Mann4-48/+70
Change-Id: Iafc67ced1af0fbb27545acb0e1569b8b8ccd9451 Reviewed-on: https://code.wireshark.org/review/14544 Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com> Petri-Dish: Pascal Quantin <pascal.quantin@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
2016-03-20ENIP: Add request/response arrows for related packetsD. Ulis1-2/+2
Change-Id: I0fbaa0569be3aafa85156cea6b7f5220c2d5e118 Reviewed-on: https://code.wireshark.org/review/14542 Reviewed-by: Michael Mann <mmann78@netscape.net>
2016-03-20URL for the document in question.Guy Harris1-0/+1
Change-Id: Id92c484099bdcd71c0ff194abeefda4bab8dcd6e Reviewed-on: https://code.wireshark.org/review/14543 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-03-20Add missing auth switch values to value_stringDaniël van Eeden1-0/+2
Change-Id: Ie602d76dfd2366294f2599f6c4d8634d37c6531c Reviewed-on: https://code.wireshark.org/review/14535 Reviewed-by: Michael Mann <mmann78@netscape.net>
2016-03-20Add CLIENT_DEPRECATE_EOF flagDaniël van Eeden1-0/+8
This is used in MySQL 5.7 https://dev.mysql.com/doc/internals/en/capability-flags.html#flag-CLIENT_DEPRECATE_EOF Change-Id: I8e00c966628233181e7145d8ed80d51f2acd9517 Reviewed-on: https://code.wireshark.org/review/14536 Reviewed-by: Michael Mann <mmann78@netscape.net>
2016-03-20Fix response ok packet with no session tracking info but flag setDaniël van Eeden1-22/+24
Change-Id: I901ebc2128c92ef758b6b400cc8d86488a2115cb Reviewed-on: https://code.wireshark.org/review/14537 Petri-Dish: Michael Mann <mmann78@netscape.net> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Michael Mann <mmann78@netscape.net>
2016-03-20Create call_data_dissector() to call data dissector.Michael Mann277-1539/+596
This saves many dissectors the need to find the data dissector and store a handle to it. There were also some that were finding it, but not using it. For others this was the only reason for their handoff function, so it could be eliminated. Change-Id: I5d3f951ee1daa3d30c060d21bd12bbc881a8027b Reviewed-on: https://code.wireshark.org/review/14530 Petri-Dish: Michael Mann <mmann78@netscape.net> Reviewed-by: Michael Mann <mmann78@netscape.net>
2016-03-20Fix incorrect table being used to store Session TicketsAdam Schwalm2-2/+2
A regression was introduced at f4580ac9edc8b5351 where an additional hash table was introduced to store TLS Session Tickets separately from Session IDs. However, the New Session Ticket dissector was still storing the the Session Ticket in the ID table, causing lookups to fail. Change-Id: Iff49202f50afb8cb6ef62c774f6155682b8e48a6 Reviewed-on: https://code.wireshark.org/review/14499 Petri-Dish: Michael Mann <mmann78@netscape.net> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Michael Mann <mmann78@netscape.net>
2016-03-20RTPS: Added new filters rtps.guidPrefix.src and rtps.guidPrefix.dstJuanjo Martin1-37/+45
As well as in the rest of network protocols, in RTPS we have senders and receivers of data. The atomic unit is not the host address (IP) or the host address and port (UDP) but the guidPrefix. The guidPrefix represents a single DomainParticipant, that very likely will be an application. I have added filters to be able to differentiate from source of information and destination of information. Before, the only filter available was rtps.guidPrefix Change-Id: I810d8b043796119c6e381bdbcb6061e0525ea272 Reviewed-on: https://code.wireshark.org/review/14466 Petri-Dish: Michael Mann <mmann78@netscape.net> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Michael Mann <mmann78@netscape.net>
2016-03-20[Automatic update for 2016-03-20]Gerald Combs2-35/+215
Update manuf, services enterprise-numbers, translations, and other items. Change-Id: I1c1b5c902782d9250eab3341ff56e09f79c4c0e3 Reviewed-on: https://code.wireshark.org/review/14532 Reviewed-by: Gerald Combs <gerald@wireshark.org>
2016-03-20PKTC must be stricter with its Kerberos application choices.Michael Mann1-2/+19
The PKTC dissector calls the Kerberos dissector assuming certain application values. Because different application values can have different "private" data, corruption can occur. Ensure the Kerberos application values match the preceding comments by checking the ber identifier before calling the Kerberos dissector. Bug: 12206 Change-Id: I9b04837f93a56681cae3816278315cf01da17544 Reviewed-on: https://code.wireshark.org/review/14520 Petri-Dish: Michael Mann <mmann78@netscape.net> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
2016-03-20Manually add protocol dependencies derived from find_dissector.Michael Mann353-817/+843
Started by grepping call_dissector_with_data, call_dissector_only and call_dissector and traced the handles passed into them to a find_dissector within the dissector. Then replaced find_dissector with find_dissector_add_dependency and added the protocol id from the dissector. "data" dissector was not considered to be a dependency. Change-Id: I15d0d77301306587ef8e7af5876e74231816890d Reviewed-on: https://code.wireshark.org/review/14509 Petri-Dish: Michael Mann <mmann78@netscape.net> Reviewed-by: Michael Mann <mmann78@netscape.net>
2016-03-20Start work on API to generate protocol dependency tree.Michael Mann2-1/+150
Dissector and heuristic tables now setup protocol dependencies. "Manual" dependencies in separate patch. Ping-Bug: 1402 Change-Id: I8da1239306de8676dcb05f8807914376816fc44f Reviewed-on: https://code.wireshark.org/review/14447 Petri-Dish: Roland Knall <rknall@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Michael Mann <mmann78@netscape.net>
2016-03-20Fix compiling with CTDEBUG=1Daniël van Eeden1-7/+7
Change-Id: Idf36ebd7ceb3f87ceb6a68774f5b2810f8cf7b58 Reviewed-on: https://code.wireshark.org/review/14527 Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com> Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Michael Mann <mmann78@netscape.net>
2016-03-19Remove unused header field.Jaap Keuter1-22/+0
Removing setting up and decoding for a header field which never can be used anyway. Change-Id: Ieed7810dd654df944a5bd16a7b84d3367bf9fa14 Reviewed-on: https://code.wireshark.org/review/14524 Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
2016-03-19Make sure first byte in ACAP packet is printable.Michael Mann1-0/+11
Saves some false positives for protocols using port 674. Bug: 12265 Change-Id: I7cb8aa9318639db0822b05b8c5b6f6563d8d4afc Reviewed-on: https://code.wireshark.org/review/14521 Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com> Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Michael Mann <mmann78@netscape.net>
2016-03-186lowpan: proto_tree_add_item() can be used directly for an FT_UINT64Martin Kaiser1-5/+4
Change-Id: I3f43fc9b0951822dd2ec3aba85af993e20c549d3 Reviewed-on: https://code.wireshark.org/review/14515 Reviewed-by: João Valverde <j@v6e.pt> Petri-Dish: João Valverde <j@v6e.pt> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
2016-03-186lowpan: remove a ton of if (tree) checksMartin Kaiser1-172/+109
Change-Id: Idff3eda741e62bfe5b00f30760bcc8af0e8e5df5 Reviewed-on: https://code.wireshark.org/review/14514 Reviewed-by: Martin Kaiser <wireshark@kaiser.cx>
2016-03-18iso14443: fix the dissection of ATQAMartin Kaiser1-11/+36
the two bytes are sent LSB first all fields are defined relative to the entire 16bit value Change-Id: Iaea2b98fcb1f57224fbbd1c4c58473a7f810055d Reviewed-on: https://code.wireshark.org/review/14513 Reviewed-by: Martin Kaiser <wireshark@kaiser.cx>
2016-03-18IEEE 802.1Q/VLAN: Resolve ID to a describing nameUli Heilmeier4-1/+228
A vlans file in the personal preference directory add an option to resolve VLAN IDs to a describing name. Format of vlan file is 123\tName of VLAN To enable the resolving the preference nameres.vlan_name must be set to TRUE. Bug: 11209 Change-Id: I3f00b4897aace89c03c57b68b6c4b6c8b7d4685a Reviewed-on: https://code.wireshark.org/review/14471 Reviewed-by: Michael Mann <mmann78@netscape.net> Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
2016-03-18INAP (ASN1): fix indent (use 2 spaces) and modelines infoAlexis La Goutte2-259/+277
Change-Id: I45b48c1e89ff68b1d990cd7cff9dd180cf4a1f7f Reviewed-on: https://code.wireshark.org/review/14505 Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com> Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Michael Mann <mmann78@netscape.net>
2016-03-18Clamp down on address data structure usage and AT_NONE semanticsJoão Valverde1-7/+7
Catch errors like bug 12205 with an assertion. Change-Id: I17381c92dfb22912e53eb20f6436adfa15d67e71 Reviewed-on: https://code.wireshark.org/review/14251 Petri-Dish: João Valverde <j@v6e.pt> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: João Valverde <j@v6e.pt>
2016-03-17ASTERIX: fix for wrong RE and SP fields in CAT048.Marko Hrastovec1-1/+1
Bug: 12267 Change-Id: I4871da19cb8b11e2df0de13993350a71168f7ab4 Reviewed-on: https://code.wireshark.org/review/14502 Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
2016-03-17[INAP] In dissect_returnErrorData in the .cnf file the parameter_pduAndersBroman2-7/+7
calls must return offset. Fixes https://ask.wireshark.org/questions/50998/issue-decoding-inap-systemfailure-parameter Change-Id: Idceb5f2576f8249d4a04b0a3612b5b1ef67f7093 Reviewed-on: https://code.wireshark.org/review/14501 Petri-Dish: Anders Broman <a.broman58@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2016-03-17Associate dissector tables and heuristic subdissector lists with a protocol.Michael Mann252-697/+629
This will make it easier to determine protocol dependencies. Some LLC OUI dissector tables didn't have an associated protocol, so they were left without one (-1 used) Change-Id: I6339f16476510ef3f393d6fb5d8946419bfb4b7d Reviewed-on: https://code.wireshark.org/review/14446 Reviewed-by: Michael Mann <mmann78@netscape.net>
2016-03-16ssl: add more TLS extensionsHauke Mehrtens1-2/+4
These extensions were added in the last time. This just adds the basic part, wireshark is now able to translate the number into a string. these numbers are defined here: https://www.iana.org/assignments/tls-extensiontype-values/tls-extensiontype-values.xhtml Change-Id: I9d1f1a04318aa116930202aa0fadb59648bed78d Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> Reviewed-on: https://code.wireshark.org/review/14484 Reviewed-by: Michael Mann <mmann78@netscape.net>
2016-03-16More control frame dissection cleanups.Guy Harris1-16/+20
Get rid of most tests of tree, so we always step through the packet. Change-Id: I0b54aecd7e871d9d48fc03f387131f0f6034b42f Reviewed-on: https://code.wireshark.org/review/14496 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-03-16Fix dissection of control frames.Guy Harris1-26/+42
Don't conditiionalize stuff that should always be done with a test of whether the protocol tree is being constructed or not. Don't add an extra bogus address field to CF-End frames. Bug: 12266 Change-Id: I0840d63480f9d7d8ffa434d984082a4a46a00d12 Reviewed-on: https://code.wireshark.org/review/14493 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-03-16Indicate where ACAP is specified.Guy Harris1-0/+1
Change-Id: I5a153b6d340f468b9835c3a0adee195807d7cae1 Reviewed-on: https://code.wireshark.org/review/14489 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-03-16ssl: add extra supported ECC/DH groupsHauke Mehrtens1-0/+7
These new groups are defined by IANA here: https://www.iana.org/assignments/tls-parameters/tls-parameters.xml Change-Id: I29e0710d853e172c27b8989b21f7b29535bfc521 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> Reviewed-on: https://code.wireshark.org/review/14485 Reviewed-by: Michael Mann <mmann78@netscape.net>
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-02 04:22:24 +0000