summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2016-01-19X509AF: make a local copy of algorithm_id in file scope for later usePascal Quantin3-11/+23
Bug: 12002 Change-Id: Iff48863c1954f76d6fc34150d315d15295dc1f5c Reviewed-on: https://code.wireshark.org/review/13406 Petri-Dish: Pascal Quantin <pascal.quantin@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
2016-01-19sshdump: fix typo in extcap-config.Dario Lombardo1-1/+1
Change-Id: Ie6e60244e9ec6f80d37db9e46342c363825bc9ce Reviewed-on: https://code.wireshark.org/review/13415 Petri-Dish: Dario Lombardo <lomato@gmail.com> Reviewed-by: Michal Labedzki <michal.labedzki@tieto.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Dario Lombardo <lomato@gmail.com>
2016-01-19[OpenFlow v1] Dissect part of stats messages.AndersBroman1-12/+161
Bug: 12023 Change-Id: I09d53d25247be8f932375e1d0778211241b0907d Reviewed-on: https://code.wireshark.org/review/13396 Petri-Dish: Anders Broman <a.broman58@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2016-01-19improved vuze-dht supportДмитрий Цветцих1-6/+62
Vuze have a very old documentation. The last version of the protocol contains 2 new fields. This patch added support of these fields. They are named "Generic Flags" and "Generic Flags 2" as a getters in source code. Change-Id: I2257b273537ee2d5316ebcde72ade6ad4ad8d299 Reviewed-on: https://code.wireshark.org/review/13395 Petri-Dish: Anders Broman <a.broman58@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2016-01-19Don't use IP address strings as "names" for MAC addresses.Guy Harris2-51/+54
Have a flag for addresses indicating whether the address is resolved to a name or whether its "name" is just a printable version of the address. If the name corresponding to an IP address isn't really a name, don't assign it to a MAC address. Clean up some code a bit (have a fill_dummy_ip6() corresponding to fill_dummy_ip4()). Bug: 10212 Change-Id: I9d0ffa2706be17842f832c64cea7acc5c1dc6536 Reviewed-on: https://code.wireshark.org/review/13412 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-01-19 DCM: ignore the upper flag bits of PDV in PDU DATA packetRich Coe1-9/+23
The DICOM protocol in PS3.8 E.2 says bits 2-7 should be set to zero by the sender and not checked by the receiver. The version of software sending a bad PDV flags is PACSONE01AUG03. The version of this software might be 2004-02-07 (or earlier) found at http://www.pacsone.net/download.htm Change-Id: If4d9d8e63d7bdba0f8f1c50e49979ca15b5f9157 Reviewed-on: https://code.wireshark.org/review/13384 Reviewed-by: Michael Mann <mmann78@netscape.net> Petri-Dish: Michael Mann <mmann78@netscape.net> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2016-01-19MAUSB: Fix Dead Store (Dead assignement/Dead increment) Warning found by ClangAlexis La Goutte1-2/+1
Change-Id: I69b21ee05755cf849d52756ef4cad7bb3571762d Reviewed-on: https://code.wireshark.org/review/13327 Reviewed-by: Anders Broman <a.broman58@gmail.com>
2016-01-19ERF: Fix Dead Store (Dead assignement/Dead increment) Warning found by ClangAlexis La Goutte1-0/+1
Change-Id: Ibdf2eef90dff97498ddf9e11dfa14b7117ea4eab Reviewed-on: https://code.wireshark.org/review/13326 Reviewed-by: Anders Broman <a.broman58@gmail.com>
2016-01-19[LBMC] Bugfix stack-based buffer overflow in dissect_nhdr_extopt.Michael Mann1-12/+39
Bug: 11984 Change-Id: I16ef6e830f0377992233a1bd255c1e3877e56a55 Reviewed-on: https://code.wireshark.org/review/13375 Reviewed-by: Michael Mann <mmann78@netscape.net> Petri-Dish: Michael Mann <mmann78@netscape.net> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2016-01-19PCAP PKTDATA: Fix Dead Store (Dead assignement/Dead increment) Warning found ↵Alexis La Goutte1-2/+0
by Clang Change-Id: Ia6e14bc1cc93645317c10b4e649f4839d802053a Reviewed-on: https://code.wireshark.org/review/13403 Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-01-19CMake: Fix an endif.Gerald Combs1-1/+1
Fix CMake Warning (dev) in CMakeLists.txt: A logical block opening on the line C:/Development/wireshark-w64/CMakeLists.txt:1649 (if) closes on the line C:/Development/wireshark-w64/CMakeLists.txt:1668 (endif) with mis-matching arguments. This warning is for project developers. Use -Wno-dev to suppress it. Change-Id: I6b6060e4d88b385deb81111234e3229d104772f1 Reviewed-on: https://code.wireshark.org/review/13407 Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Gerald Combs <gerald@wireshark.org>
2016-01-18SSL : Fix Branch condition evaluates to a garbage value found by ClangAlexis La Goutte1-1/+1
Change-Id: I06150ce2d42285de0cb150f787f10942d1d7d4c0 Reviewed-on: https://code.wireshark.org/review/13404 Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Peter Wu <peter@lekensteyn.nl>
2016-01-18Bluetooth: EIR/AD: Add missing IPS itemMichal Labedzki3-17/+235
Change-Id: I8cfb0b375d4585bbeb890e79c1a41303e0277065 Reviewed-on: https://code.wireshark.org/review/13387 Reviewed-by: Anders Broman <a.broman58@gmail.com> Petri-Dish: Anders Broman <a.broman58@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Michal Labedzki <michal.labedzki@tieto.com> Tested-by: Michal Labedzki <michal.labedzki@tieto.com>
2016-01-18Fix "Apply As Filter..." for BASE_PT field display typesJoão Valverde1-0/+4
Change-Id: Id92c16d04836b7871a26a285bee5bcf358ca50ef Reviewed-on: https://code.wireshark.org/review/13399 Reviewed-by: João Valverde <j@v6e.pt>
2016-01-18ETSI CAT: allow a length of 0 bytes for Location Information IEPascal Quantin1-0/+2
According to 3GPP 31.111 chapter 8.19, 0 is a valid length (IE is empty in this case) Change-Id: Ia47c9106b5db217425f9e6f56483c84378c34a0b Reviewed-on: https://code.wireshark.org/review/13401 Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
2016-01-18Add a copy button to the Filter Expression preferences.Gerald Combs3-10/+43
Add a "copy" button to match other parts of the UI. Change-Id: I4240aaaaf18a6bbf8e6737a12bcfead2248acca7 Reviewed-on: https://code.wireshark.org/review/13322 Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Gerald Combs <gerald@wireshark.org>
2016-01-18Qt: Fixup the Display Filter Expression syntax logic.Gerald Combs4-16/+8
In the Display Filter Expression dialog, only disable the OK button when we have an invalid filter. Move the deprecated warning string from DisplayFilterEdit::checkFilter to SyntaxLineEdit::checkDisplayFilter so that we can use it in more places. Change-Id: I938f5f10258f4fd9dd3a33c174dd9958c9634766 Reviewed-on: https://code.wireshark.org/review/13317 Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Gerald Combs <gerald@wireshark.org>
2016-01-18androiddump: There is no need to make full copy optargMichal Labedzki1-4/+4
Copy pointer is enough. Change-Id: I51188a8434f6e4ba1d9bf3456bd29e027dd40f35 Reviewed-on: https://code.wireshark.org/review/13393 Reviewed-by: Michael Mann <mmann78@netscape.net>
2016-01-18Add Lua dependings only if LUA is enabledMichal Labedzki1-1/+1
Avoid build fail if found Lua but it is disabled. Change-Id: If1cf0d650454d2844a1430135de1385c984e5ba4 Reviewed-on: https://code.wireshark.org/review/13394 Petri-Dish: Michael Mann <mmann78@netscape.net> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Michael Mann <mmann78@netscape.net>
2016-01-18extcap: add masked to options.Dario Lombardo8-2/+29
This allows an option to be masked (like a password), by using the argument-type password. Change-Id: I2eae1be2e6672bff28ba5f749d7a3f687ebd4631 Reviewed-on: https://code.wireshark.org/review/13385 Reviewed-by: Dario Lombardo <lomato@gmail.com> Petri-Dish: Roland Knall <rknall@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Roland Knall <rknall@gmail.com>
2016-01-18Bluetooth: Update Assign numbers (5th December 2015)Michal Labedzki4-1/+99
Add TDS and OTS/OTP UUID, OTS PSM (I cannot find it, but it seems to be linear), update CompanyIds and add three EIR/AD codes: URI, Indoor Positioning and Transport Discovery Data. Implementation of new "numbers" will be done later. Change-Id: I8ad4d9c1d55c1824d87e88303c28e67dd445ec98 Reviewed-on: https://code.wireshark.org/review/13386 Petri-Dish: Anders Broman <a.broman58@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2016-01-18Directly call the FDDI and "raw IP" dissectors from the nettl dissector.Guy Harris3-21/+19
Just get handles for the dissectors, don't go through the wtap_encap dissector table. Change-Id: I459249b98741cc069495c84ad4c47c0aa6768096 Reviewed-on: https://code.wireshark.org/review/13383 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-01-18Have the "maybe an FCS" version of the Ethernet dissector take a data argument.Guy Harris5-8/+43
It's called from some places other than packet-frame.c, at least one of which currently can't call anything else (the ATM dissector, for VC-multiplexed bridged frames, where you don't know whether the frames include the FCS or not), so the frame's pseudo-data doesn't necessarily have the appropriate "FCS length" value. Have it explicitly check the data argument, and explicitly pass the appropriate value to it. Ping-Bug: 9933 Change-Id: I0c75f921d25d1e2b75e476c15ff9625205036b25 Reviewed-on: https://code.wireshark.org/review/13382 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-01-18Call the "without FCS" version of the Ethernet dissector.Guy Harris1-1/+1
At least in the sample captures attached to bug 2631, the encapsulated Ethernet frames don't include the FCS. Bug: 9933 Change-Id: Ie14b87020c44d739173e5da9fc58a91924f38dfe Reviewed-on: https://code.wireshark.org/review/13377 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-01-18Handle frames where the type field is a length field.Guy Harris1-20/+127
The BNEP Version 1.0 spec says, for BNEP_GENERAL_ETHERNET packets, "Note: Networking Protocol Types as used in this specification SHALL be taken to include values in the range 0x0000-0x05dc, used to represent the IEEE802.3 length interpretation of the IEEE802.3 length/type field.", although it says that it's not mandatory to process those packets. We'll process them. We don't need an Ethernet dissector handle, so don't fetch one. Change-Id: I10b1fce62688fc0643435d0a01bdb969577df97e Reviewed-on: https://code.wireshark.org/review/13376 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-01-18Fix indentation.Guy Harris1-1/+1
Change-Id: I7f9ea1e88b53ce1ac0f0c01678b8aebe4f7ba393 Reviewed-on: https://code.wireshark.org/review/13374 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-01-17Prevent out-of-bounds read in hiqnet_display_data.Michael Mann1-14/+25
Bug: 11983 Change-Id: If8b0c4ff45014c0d7480e43afaaf12747590a56f Reviewed-on: https://code.wireshark.org/review/13370 Petri-Dish: Michael Mann <mmann78@netscape.net> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Michael Mann <mmann78@netscape.net>
2016-01-17Fix comment.Guy Harris1-1/+1
Change-Id: Icea9d23bb979ae6b57c65e0178a3634689992e78 Reviewed-on: https://code.wireshark.org/review/13369 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-01-17More comments.Guy Harris1-1/+31
Including a URL for a Cisco page with diagrams of the encapsulation. Change-Id: I4fb4356ea6071ca7efb596a8d35f982478bf4896 Reviewed-on: https://code.wireshark.org/review/13367 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-01-17Fix construction of subset tvbuff.Guy Harris1-51/+57
We should use both the captured length and original length, and we should use them as the captured length and original length of the tvbuff. Clean up indentation and returning process while we're at it. Change-Id: If7538268cd6ae557d9d5b85eefd57cf3e2e34a9e Reviewed-on: https://code.wireshark.org/review/13366 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-01-17Call the "without FCS" version of the Ethernet dissector.Guy Harris1-1/+1
At least in the sample capture attached to bug 3195, the encapsulated Ethernet frames don't include the FCS. Bug: 9933 Change-Id: I4440568deaa676ba8848694b80ed800244c8c5d9 Reviewed-on: https://code.wireshark.org/review/13363 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-01-17Fix build [-Werror=maybe-uninitialized]João Valverde7-19/+21
Found building with GCC 5.3.0 and CFLAGS="-g -Og". Change-Id: I5bc29b6e91cc98332a513c9d03b02d2f6906608d Reviewed-on: https://code.wireshark.org/review/13362 Reviewed-by: João Valverde <j@v6e.pt> Petri-Dish: João Valverde <j@v6e.pt> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
2016-01-17[iseries] fix iseries_check_file_type()Martin Kaiser1-6/+15
check that we have a line that contains OBJECT PROTOCOL ETHERNET (at the moment, we fail if there's a line containing OBJECT PROTOCOL but not ETHERNET and succeed otherwise -> a file with some random lines will be identified as iseries) initialize our line buffer with 0s to make sure we don't access uninitialized data while parsing don't set wth->priv unless the file is really an iseries file free the iseries struct if the file is not our type Bug: 11985 Change-Id: I0ac7003c047f54ca025d02e59b56d1ff4e2a6be7 Reviewed-on: https://code.wireshark.org/review/13360 Petri-Dish: Martin Kaiser <wireshark@kaiser.cx> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
2016-01-17[iseries] return WTAP_OPEN_ERROR if file_seek() failsMartin Kaiser1-1/+1
like it's done for the other file types Change-Id: I8caa360b9c527ea642ee6b5102759ad341ad0030 Reviewed-on: https://code.wireshark.org/review/13359 Reviewed-by: Martin Kaiser <wireshark@kaiser.cx>
2016-01-17[netlink] remove an unnecessary if (tree) checkMartin Kaiser1-6/+4
Change-Id: Id9d20bf98550cfb879c107063d0011840536538a Reviewed-on: https://code.wireshark.org/review/13361 Reviewed-by: Martin Kaiser <wireshark@kaiser.cx>
2016-01-17[Automatic update for 2016-01-17]Gerald Combs16-1955/+2019
Update manuf, services enterprise-numbers, translations, and other items. Change-Id: I4aacb3b957cbb04f1848504bfb6880fe010723a3 Reviewed-on: https://code.wireshark.org/review/13356 Reviewed-by: Gerald Combs <gerald@wireshark.org>
2016-01-17[sll] call the netlink dissector if the arp_hdr type is netlinkMartin Kaiser2-6/+19
re-order things a bit so that don't display anything if we just relay our packet to the netlink dissector Bug: 12018 Change-Id: Ic115de82d682b7105a1e97fb8be2709ac4875232 Reviewed-on: https://code.wireshark.org/review/13335 Reviewed-by: Michael Mann <mmann78@netscape.net> Petri-Dish: Michael Mann <mmann78@netscape.net> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
2016-01-17Correctly construct subset tvbuffs.Guy Harris1-23/+8
Use tvb_subset_remaining() or tvb_subset_length() - they calculate the correct captured length for you. This fixes, for example, the EoIB code, where you ended up with tvbuffs with captured length > reported length. Change-Id: Ie792b53a796d4b32242cb83020b54232a2a09698 Reviewed-on: https://code.wireshark.org/review/13355 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-01-17Dissect Ethernet-over-GFP frames with the "with the FCS" dissector.Guy Harris1-2/+8
Ethernet-over-GFP frames include the Ethernet FCS. Ping-Bug: 9933 Change-Id: I4eb3f0428b34d7ab62b505fe20f2ba31762594f3 Reviewed-on: https://code.wireshark.org/review/13354 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-01-17Call the "no FCS present" version of the Ethernet dissector.Guy Harris1-1/+19
I haven't found an official spec for EoIB, but slide 10 of http://downloads.openfabrics.org/Media/Sonoma2009/Sonoma_2009_Tues_converged-net-bridging.pdf shows the "Eth Payload" following the "Eth Header" and optional "Vlan tag", and doesn't show an FCS; "Payload" generally refers to the data transported by the protocol, which wouldn't include the FCS. In addition, the capture attached to bug 5061 includes no Ethernet FCS. So we assume the Ethernet frames carried by EoIB don't include the Ethernet FCS. Bug: 9933 Change-Id: I310e5727c42e05498d1f1df08266a48fd6674388 Reviewed-on: https://code.wireshark.org/review/13351 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-01-17Call the "no FCS present" version of the Ethernet dissector.Guy Harris1-3/+7
The I-D doesn't explicity indicate that the FCS isn't present in the tunneled Ethernet frames, but it is missing from the captures attached to bug 10282. Update the I-D number while we're at it. Bug: 9933 Change-Id: I6e78b20cb858e6c8c4d7380b17b88382db013d56 Reviewed-on: https://code.wireshark.org/review/13350 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-01-17Use the "no FCS" version of the Ethernet dissector.Guy Harris1-1/+10
RFC 6325, section 4.1.4 "Frame Check Sequence (FCS)", says "Thus, when a frame is encapsulated, the original FCS is not included but is discarded." meaning that the inner Ethernet frame does *not* include an FCS. Change-Id: Ie764ceb66dd43b951da015870e3e652ccfc651b5 Ping-Bug: 9933 Reviewed-on: https://code.wireshark.org/review/13347 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-01-17Use the "no FCS" version of the Ethernet dissector.Guy Harris1-6/+10
RFC 7348 Figures 1 and 2, in the Payload section, says "(Note that the original Ethernet Frame's FCS is not included)" meaning that the inner Ethernet frame does *not* include an FCS. Also, update the protocol references (the I-D is now RFC 7348) and add the I-D for the group policy stuff. Remove some extra blank lines while we're at it. Change-Id: Ib94a43b95b0761e97d1406a1cca3687ee640e12d Ping-Bug: 9933 Reviewed-on: https://code.wireshark.org/review/13343 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-01-17Don't look at pinfo->pseudo_header.Guy Harris4-153/+205
On the off chance that UMTS FP traffic is being carried over a pseudowire. :-) Change-Id: I8db0fbe96545c08f4748bf9ec046e2dc4f2c2cc6 Reviewed-on: https://code.wireshark.org/review/13342 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-01-16Add WTAP_ENCAP_NFC_LLCP to the list of types require a pseudo-header.Guy Harris2-17/+21
Discovered by changing wtap_encap_requires_phdr() to use a switch statement and comparing the case arms. Change-Id: I2a23b86ddfbc88c1b3251a0e97f7f00ee93f630e Reviewed-on: https://code.wireshark.org/review/13341 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-01-16Have the pcap_pktdata dissector dissect the payload.Guy Harris1-8/+5
That lets us handle pseudo-headers derived from packet data in one central place. Change-Id: Ie8e1d2d7dac176ea45be08cdc49bd808d9f8cc5b Reviewed-on: https://code.wireshark.org/review/13340 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-01-16Get rid of unused stuff.Guy Harris1-5/+0
Change-Id: Iad17e64de609d95d1e13c94ae13d1a4834786dd6 Reviewed-on: https://code.wireshark.org/review/13339 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-01-16Get rid of a no-longer-needed #include.Guy Harris1-3/+0
Change-Id: I725891d40d27ed87963d717c2c69b1288dafd2da Reviewed-on: https://code.wireshark.org/review/13338 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-01-16Have the pcap_pktdata dissector dissect the payload.Guy Harris1-68/+16
That lets us handle pseudo-headers derived from packet data in one central place. Change-Id: I25cb7599a8d3c31e5cbcfda94b072557209f5342 Reviewed-on: https://code.wireshark.org/review/13337 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-01-16Don't call dissectors that require a pseudo-header if we can't generate one.Guy Harris1-68/+100
It's not safe to pass a null data pointer to a link-layer header type dissector that expects the data pointer to point to a pseudo-header. Also, remove one extra layer of protocol tree. Change-Id: I030d38fd7d2f99d471020227597e4d7d81506e3e Reviewed-on: https://code.wireshark.org/review/13336 Reviewed-by: Guy Harris <guy@alum.mit.edu>