metze/wireshark/wip.git
7 years agoBe more forgiving about invalid Coloring Rules.
Gerald Combs [Tue, 20 Sep 2016 18:30:38 +0000 (11:30 -0700)]
Be more forgiving about invalid Coloring Rules.

In ColoringRulesDialog:

Only check a rule's display filter if that rule is enabled. This keeps
us from disabling the OK button when we shouldn't.

Adjust the "Your coloring rules file contains unknown rules" dialog text
and buttons for accuracy.

In color_filters.c:

Don't try to compile disabled filters in color_filters_apply. Don't warn
about disabled and invalid filters in read_filters_file.

Bug: 12814
Change-Id: I7143bf8e7a6162d296f1e93769344b69763195c8
Reviewed-on: https://code.wireshark.org/review/17823
Reviewed-by: Gerald Combs <gerald@wireshark.org>
Petri-Dish: Gerald Combs <gerald@wireshark.org>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
7 years agoPROFINET: Add preliminary version of the Reporting System (RS) dissection.
Birol Capa [Wed, 28 Sep 2016 11:00:17 +0000 (14:00 +0300)]
PROFINET: Add preliminary version of the Reporting System (RS) dissection.

The Reporting System (RS) ASE is composed of Observers and Event buffer queues.

Bug: 12959
Change-Id: Ibce2d607bffe9c04b24e8ccd5ef502307fbba7c6
Reviewed-on: https://code.wireshark.org/review/17965
Petri-Dish: Anders Broman <a.broman58@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
7 years agoInterface List: Allow column filtering in model
Roland Knall [Mon, 3 Oct 2016 14:31:36 +0000 (16:31 +0200)]
Interface List: Allow column filtering in model

This change allows for the definition of columns to be shown
to the enduser if instanting the proxy model. The tree model
will allways transport ALL data, and it is the job of the proxy
model to determine which data is actually shown.

Additionally, this removes the final definitions of the global
interface array from interface_frame as well as sort_filter, so
that knowledge about the inner workings of the interface list
is contained to interface_tree_model

Change-Id: Ib34b150066ee344ad0d18bec1d90826eb0fa28b2
Reviewed-on: https://code.wireshark.org/review/18039
Petri-Dish: Roland Knall <rknall@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Roland Knall <rknall@gmail.com>
7 years agossl: use ws_strtou function.
Dario Lombardo [Thu, 29 Sep 2016 12:32:03 +0000 (14:32 +0200)]
ssl: use ws_strtou function.

Change-Id: I947dc83e3b1b853873b5158f234e44ef933c3bcc
Reviewed-on: https://code.wireshark.org/review/17982
Reviewed-by: Peter Wu <peter@lekensteyn.nl>
Petri-Dish: Peter Wu <peter@lekensteyn.nl>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
7 years agoieee80211: (Re)Fix EOSP flag dissection for mesh case
Michael Mann [Mon, 3 Oct 2016 12:16:30 +0000 (08:16 -0400)]
ieee80211: (Re)Fix EOSP flag dissection for mesh case

Ia8d4d74a7f0f5795790f930fc1e894a7ee202da7 didn't have proper bit comparison.

Change-Id: I5b7e431745aff7ca895b6b83500bd7e8f1039fde
Reviewed-on: https://code.wireshark.org/review/18038
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
7 years ago[Diameter] Use ...array_sized_new() for hf:s and ett:s
AndersBroman [Mon, 3 Oct 2016 07:59:52 +0000 (09:59 +0200)]
[Diameter] Use ...array_sized_new() for hf:s and ett:s

Change-Id: I5d3d3779ccf1fcd8a61e6cb6342305db2bc6e2be
Reviewed-on: https://code.wireshark.org/review/18036
Petri-Dish: Anders Broman <a.broman58@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agoQt: make parameter unused when SHOW_BUFFER_COLUMN is undefined.
Dario Lombardo [Tue, 27 Sep 2016 07:39:07 +0000 (09:39 +0200)]
Qt: make parameter unused when SHOW_BUFFER_COLUMN is undefined.

Change-Id: I87843f61d4c98fea90e49088f3d56df5aa801e58
Reviewed-on: https://code.wireshark.org/review/17946
Reviewed-by: Peter Wu <peter@lekensteyn.nl>
Petri-Dish: Peter Wu <peter@lekensteyn.nl>
Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
Reviewed-by: Dario Lombardo <lomato@gmail.com>
7 years agoQt: properly handle UAT changes on dialog close
Peter Wu [Fri, 30 Sep 2016 08:51:41 +0000 (10:51 +0200)]
Qt: properly handle UAT changes on dialog close

Ensure that UAT changes are always applied, not just when pressing the
OK/Cancel buttons, but also when closing the dialog via the window close
button or by pressing Escape.

Change-Id: I0f0b97588553c6b01a24dfde78218d0ce2667e2c
Reviewed-on: https://code.wireshark.org/review/17993
Petri-Dish: Peter Wu <peter@lekensteyn.nl>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agocisco-erspan: fix no newline at end of file [-Wnewline-eof]
Alexis La Goutte [Sun, 2 Oct 2016 17:58:10 +0000 (19:58 +0200)]
cisco-erspan: fix no newline at end of file [-Wnewline-eof]

Change-Id: I155a2293d48a62bd198aa20f0fb68f76934cdb6a
Reviewed-on: https://code.wireshark.org/review/18031
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agoIPP packet dissector improvements:
Michael Sweet [Sat, 20 Aug 2016 16:09:25 +0000 (12:09 -0400)]
IPP packet dissector improvements:

- Support collection values
- Support out-of-band values
- Support unknown values
- Support detail for octetString/collection values
- Support symbolic enum keywords for member attributes
- Update detail format to be more compact, normalize format to match IPP
  syntax descriptions

Change-Id: I76295221901fa88250a2e9ef099eca2c53b20132
Reviewed-on: https://code.wireshark.org/review/17693
Petri-Dish: Anders Broman <a.broman58@gmail.com>
Reviewed-by: Smith Kennedy <smith.kennedy@hp.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agoLPP: upgrade dissector to v13.2.0
Pascal Quantin [Sun, 2 Oct 2016 20:33:03 +0000 (22:33 +0200)]
LPP: upgrade dissector to v13.2.0

Change-Id: I6ebf5efcb656534f663369b7987aa32ebd55d2dc
Reviewed-on: https://code.wireshark.org/review/18033
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
Petri-Dish: Pascal Quantin <pascal.quantin@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agotshark: follow streams should start with chunk 1.
Michael Mann [Sun, 2 Oct 2016 23:21:05 +0000 (19:21 -0400)]
tshark: follow streams should start with chunk 1.

Chunk 0 is not allowed, so it's discarded when outputting a stream.

Ping-Bug: 12855
Change-Id: Ia7bbb0e222b6b4e714f8bfa245e910c151d82905
Reviewed-on: https://code.wireshark.org/review/18034
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
7 years agoX2AP: upgrade dissector to v13.5.0
Pascal Quantin [Sun, 2 Oct 2016 18:52:14 +0000 (20:52 +0200)]
X2AP: upgrade dissector to v13.5.0

Also get rid of two global variables

Change-Id: I8c20decb76f5c1773f58efd24d2e1e7d1177d358
Reviewed-on: https://code.wireshark.org/review/18029
Petri-Dish: Pascal Quantin <pascal.quantin@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
7 years agomake-manuf: Add more sanity checks.
Gerald Combs [Sun, 2 Oct 2016 19:03:34 +0000 (12:03 -0700)]
make-manuf: Add more sanity checks.

Increase the number of minimum entries required in each IAB / OUI file
to 1000. Add a minimum total entry count. Add total counts to the
output. Trim whitespace so that we pass the pre-commit hook.

Re-run make-manuf to fix the mass removal in g3ab0137.

Change-Id: I6f924969c1b494f2e0b62570a459e99ba5c1b02f
Reviewed-on: https://code.wireshark.org/review/18030
Reviewed-by: Gerald Combs <gerald@wireshark.org>
7 years agoSome strings that appear in at least some .aps files.
Guy Harris [Sun, 2 Oct 2016 18:27:18 +0000 (11:27 -0700)]
Some strings that appear in at least some .aps files.

Change-Id: I335a2db8ce6ebb424081a9a6156c6eb523720029
Reviewed-on: https://code.wireshark.org/review/18028
Reviewed-by: Guy Harris <guy@alum.mit.edu>
7 years agoInterface List: Fix build for no PCAP builds
Roland Knall [Sun, 2 Oct 2016 14:47:04 +0000 (16:47 +0200)]
Interface List: Fix build for no PCAP builds

This is a fix for building without libpcap. Also, changing _U_
to Q_UNUSED for the tree_model

Change-Id: I38a992731a3d3c4062ffab3cca0049cf08050794
Reviewed-on: https://code.wireshark.org/review/18019
Petri-Dish: Roland Knall <rknall@gmail.com>
Reviewed-by: Guy Harris <guy@alum.mit.edu>
7 years agoInterface List: Hide button for only one interface
Roland Knall [Sun, 2 Oct 2016 14:22:27 +0000 (16:22 +0200)]
Interface List: Hide button for only one interface

If only one interface type exists, the button row is being hidden.

Change-Id: Ieed9c363ab1ebc4bc15d0e09bceeb79a04d6e76e
Reviewed-on: https://code.wireshark.org/review/18017
Petri-Dish: Roland Knall <rknall@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Roland Knall <rknall@gmail.com>
7 years agoQt: Only color sequence analysis items having color filter
Stig Bjørlykke [Sun, 2 Oct 2016 14:41:08 +0000 (16:41 +0200)]
Qt: Only color sequence analysis items having color filter

Packets without a color filter will end up with fg_color and
bg_color = 0, so avoid drawing all in black.

Bug: 12065
Change-Id: I76bcabcfa3281fcece08f1b2af66274c808b80bb
Reviewed-on: https://code.wireshark.org/review/18018
Petri-Dish: Stig Bjørlykke <stig@bjorlykke.org>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Stig Bjørlykke <stig@bjorlykke.org>
7 years agowslua: fix wslua file test failure
Peter Wu [Sun, 2 Oct 2016 10:20:45 +0000 (12:20 +0200)]
wslua: fix wslua file test failure

Lua 5.2.4 built with -DLUA_USE_APICHECK detected a stack issue:

    tshark: lapi.c:175: lua_settop: Assertion `(-(idx+1) <= (L->top - (func + 1))) && "invalid new top"' failed.

Function File_read always assumes that File_read_line pushes a value on
the stack (which clearly did not happen). On read failure, it would then
pop the stack (tripping the assertion) to push nil.

The other user (File_lines) is also affected by this change, but the Lua
5.2.4 documentation says that it should also return nil on EOF, fitting
this implementation.

Change-Id: I9cc8a5319523b2b56f4ae4735bbdbc1196387386
Reviewed-on: https://code.wireshark.org/review/18016
Petri-Dish: Peter Wu <peter@lekensteyn.nl>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Peter Wu <peter@lekensteyn.nl>
7 years ago[Automatic update for 2016-10-02]
Gerald Combs [Sun, 2 Oct 2016 15:10:23 +0000 (08:10 -0700)]
[Automatic update for 2016-10-02]

Update manuf, services enterprise-numbers, translations, and other items.

Change-Id: Ice97c38ca24c22c72e6bc63a4329c8131d0146f2
Reviewed-on: https://code.wireshark.org/review/18020
Reviewed-by: Gerald Combs <gerald@wireshark.org>
7 years agoMakefile.am (epan/dissectors): fix indent align (and use always tabs)
Alexis La Goutte [Sun, 2 Oct 2016 07:49:05 +0000 (09:49 +0200)]
Makefile.am (epan/dissectors): fix indent align (and use always tabs)

Change-Id: I874314ac736ad94bfaf15665ee7b030382e9bdf3
Reviewed-on: https://code.wireshark.org/review/18015
Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
7 years agogsm_osmux: fix implicit conversion shortens 64-bit value into a 32-bit value (with...
Alexis La Goutte [Sun, 2 Oct 2016 07:55:52 +0000 (09:55 +0200)]
gsm_osmux: fix implicit conversion shortens 64-bit value into a 32-bit value (with macOS buildbot)

Change-Id: Idd919b20f9909fe3f85b6e1694738a8561f4d97f
Reviewed-on: https://code.wireshark.org/review/18014
Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
7 years agogsm_osmux(.h): fix packet-gsm_osmux.h: No such file or directory
Alexis La Goutte [Sun, 2 Oct 2016 07:46:39 +0000 (09:46 +0200)]
gsm_osmux(.h): fix packet-gsm_osmux.h: No such file or directory

Change-Id: I51d6aa1ff4fe7abf908872c8297a926ebebf1258
Reviewed-on: https://code.wireshark.org/review/18013
Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
7 years agoS1AP: upgrade dissector to v13.4.0
Pascal Quantin [Sat, 1 Oct 2016 21:46:13 +0000 (23:46 +0200)]
S1AP: upgrade dissector to v13.4.0

Change-Id: I140c40a93dce2ffdf7c144701bc3886d5366f951
Reviewed-on: https://code.wireshark.org/review/18012
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
Petri-Dish: Pascal Quantin <pascal.quantin@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agowsjsmn(.h): fix no newline at end of file [-Wnewline-eof]
Alexis La Goutte [Sat, 1 Oct 2016 17:08:51 +0000 (19:08 +0200)]
wsjsmn(.h): fix no newline at end of file [-Wnewline-eof]

Change-Id: If99fa78b20cdc9d2180652f7e4331fe2f8aacbff
Reviewed-on: https://code.wireshark.org/review/18008
Reviewed-by: Dario Lombardo <lomato@gmail.com>
7 years agoNAS EPS: upgrade dissector to v13.7.0
Pascal Quantin [Sat, 1 Oct 2016 18:24:45 +0000 (20:24 +0200)]
NAS EPS: upgrade dissector to v13.7.0

Change-Id: Ic856255d4adbde0af795cd36798ba4a9d42b4080
Reviewed-on: https://code.wireshark.org/review/18010
Petri-Dish: Pascal Quantin <pascal.quantin@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
7 years agointerface_tree_model(.h): fix not a Doxygen trailing comment [-Wdocumentation]
Alexis La Goutte [Sat, 1 Oct 2016 15:54:13 +0000 (17:54 +0200)]
interface_tree_model(.h): fix not a Doxygen trailing comment [-Wdocumentation]

Change-Id: Ibdf59547ec116d99ff8e60fd8c69dbd2b929e887
Reviewed-on: https://code.wireshark.org/review/18007
Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Roland Knall <rknall@gmail.com>
7 years ago3GPP NAS: upgrade dissector to v13.7.0
Pascal Quantin [Sat, 1 Oct 2016 12:22:46 +0000 (14:22 +0200)]
3GPP NAS: upgrade dissector to v13.7.0

Change-Id: I353608057c50e2631f6bae6a026f361640ec9560
Reviewed-on: https://code.wireshark.org/review/18006
Petri-Dish: Pascal Quantin <pascal.quantin@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
7 years agoInterface List: Change display to view/model
Roland Knall [Sat, 1 Oct 2016 06:54:57 +0000 (08:54 +0200)]
Interface List: Change display to view/model

This changes the underlying model of the main interface tree.
Because of that, we can resort to a view/model approach, enlisting
the global interfaces list as only data source.

The interface list works identical to the old list, but allows
for filtering of the displayed interfaces by type. Only types, which
are present and whose interfaces are not hidden, are being displayed
for selection.

Change-Id: If8475b227daa026dc0ad3d25bc7fe050d5bf2ac3
Reviewed-on: https://code.wireshark.org/review/17940
Reviewed-by: Roland Knall <rknall@gmail.com>
7 years agorlogin: use ws_strtou function.
Dario Lombardo [Wed, 21 Sep 2016 14:53:11 +0000 (16:53 +0200)]
rlogin: use ws_strtou function.

Add expert info when conversion fails.

Change-Id: Ic13cb90abddd08218a957cd771bd5a4fab5a413e
Reviewed-on: https://code.wireshark.org/review/17839
Reviewed-by: Michael Mann <mmann78@netscape.net>
7 years agouat: allow insertion of new record at arbitrary index
Peter Wu [Fri, 30 Sep 2016 08:46:28 +0000 (10:46 +0200)]
uat: allow insertion of new record at arbitrary index

This should make drag-and-drop support (reordering) in Qt easier. It
also ensures that memcpy is used as fallback if copy_cb does not exist.

Change-Id: Iefe358890c49dcda4727054f7a2cee05614a36f6
Reviewed-on: https://code.wireshark.org/review/17992
Reviewed-by: Peter Wu <peter@lekensteyn.nl>
Petri-Dish: Peter Wu <peter@lekensteyn.nl>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
7 years agoKerberos: remove some unused #define
Alexis La Goutte [Fri, 30 Sep 2016 06:15:11 +0000 (08:15 +0200)]
Kerberos: remove some unused #define

for avoid conflit with heimdal lib

Bug:12831
Change-Id: Ic244b6b8dc4f68a0f782b88984ad7857ceb02e25
Reviewed-on: https://code.wireshark.org/review/17989
Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agospnego: use same name define name from krb5
Alexis La Goutte [Fri, 30 Sep 2016 06:10:01 +0000 (08:10 +0200)]
spnego: use same name define name from krb5

and for heimdal lib add the value

Bug:12831
Change-Id: Ibf04560867acfe2a430034248ce2a386ea89b668
Reviewed-on: https://code.wireshark.org/review/17988
Reviewed-by: Michael Mann <mmann78@netscape.net>
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agoCIP: Minor bug fixes
D. Ulis [Fri, 30 Sep 2016 19:19:51 +0000 (15:19 -0400)]
CIP: Minor bug fixes

1. CIP: dissect_cip_set_attribute_list_req - Too many bytes highlighted. Could cause malformed packet
2. CIP: dissect_cip_cco_all_attribute_common - Too many bytes highlighted
3. CIP Motion: dissect_cntr_service - Wrong size passed in which tried to highlight too many bytes. Would cause malformed packet.
4. CIP: Some minor formatting/whitespace changes.

Change-Id: I5899888a3e58452945c8546cf635768cdd3cf738
Reviewed-on: https://code.wireshark.org/review/18000
Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
7 years agoNetFlow: Fix a preference description.
Gerald Combs [Fri, 30 Sep 2016 18:21:05 +0000 (11:21 -0700)]
NetFlow: Fix a preference description.

Stringify the correct macro so that we print

    (default: 60)

instead of

    (default: V9TEMPLATE_MAX_FIELDS_DEF)

Change-Id: Ie2068eaf577f6024d4a9b64ef5ce761944f269a2
Reviewed-on: https://code.wireshark.org/review/17998
Petri-Dish: Gerald Combs <gerald@wireshark.org>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Gerald Combs <gerald@wireshark.org>
7 years agowsutil: split libjsmn.
Dario Lombardo [Wed, 28 Sep 2016 10:01:33 +0000 (12:01 +0200)]
wsutil: split libjsmn.

The libjsmn was imported into the tree and enhanced with a new
function. This change splits it into the "original" libjsmn and
an addictional module wsjsmn that contains the new function.
This will make easier to port within the tree future versions
of the library.

Change-Id: I3f1caa91bee462e0767e5e18d0b6a10f0b1cad32
Reviewed-on: https://code.wireshark.org/review/17963
Petri-Dish: Peter Wu <peter@lekensteyn.nl>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Peter Wu <peter@lekensteyn.nl>
7 years agocmake: make WERROR_COMMON_FLAGS a normal string
Peter Wu [Fri, 30 Sep 2016 14:06:15 +0000 (16:06 +0200)]
cmake: make WERROR_COMMON_FLAGS a normal string

Instead of checking for the boolean "FALSE", just set an empty string.
This avoids the need to check for WERROR_COMMON_FLAGS before using it.

The transformation is the same for all files, remove
"if (WERROR_COMMON_FLAGS)" and "endif()", reindent and add quotes (since
we have a string here and not a list).

Modelines have been added where missing.

Change-Id: I0ab05ae507c51fa77336d49a99a226399cc81b92
Reviewed-on: https://code.wireshark.org/review/17997
Petri-Dish: Peter Wu <peter@lekensteyn.nl>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: João Valverde <j@v6e.pt>
Reviewed-by: Dario Lombardo <lomato@gmail.com>
Tested-by: Dario Lombardo <lomato@gmail.com>
7 years agokismet: use cast in ws_strtou.
Dario Lombardo [Fri, 30 Sep 2016 07:35:30 +0000 (09:35 +0200)]
kismet: use cast in ws_strtou.

Fix the warning:

packet-kismet.c: In function 'dissect_kismet':
packet-kismet.c:242:58: error: passing argument 3 of 'ws_strtou64' from incompatible pointer type [-Werror]
       if (ws_strtou64(format_text(line, tokenlen), NULL, &t.secs)) {
                                                          ^
In file included from packet-kismet.c:34:0:
../../wsutil/strtoi.h:49:24: note: expected 'guint64 *' but argument is of type 'time_t *'
 WS_DLL_PUBLIC gboolean ws_strtou64(const gchar* str, const gchar** endptr, guint64* cint);

Change-Id: Ifd31de22db22f39f78359cc9432eb7da187f73a6
Reviewed-on: https://code.wireshark.org/review/17990
Petri-Dish: Dario Lombardo <lomato@gmail.com>
Reviewed-by: Uli Heilmeier <openid@heilmeier.eu>
Reviewed-by: Dario Lombardo <lomato@gmail.com>
7 years agoRevert "LLDP: fix indent (use tab)"
Anders Broman [Fri, 30 Sep 2016 11:52:26 +0000 (11:52 +0000)]
Revert "LLDP: fix indent (use tab)"

This reverts commit f97372bfccf34c012b4a4a6f720ca54dae8ea5d8.

Change-Id: I750b232fa710e64815875671e713533bb0f42e24
Reviewed-on: https://code.wireshark.org/review/17995
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agoLLDP: fix indent (use tab)
Alexis La Goutte [Fri, 30 Sep 2016 08:47:21 +0000 (10:47 +0200)]
LLDP: fix indent (use tab)

Change-Id: I7f9aa2733401fc99a10d5d5a83a175e923562f50
Reviewed-on: https://code.wireshark.org/review/17991
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agoAdd dissector for the osmux protocol
Daniel Willmann [Tue, 12 Jul 2016 18:25:35 +0000 (14:25 -0400)]
Add dissector for the osmux protocol

The Osmux protocol bundles multiple AMR frames inside one UDP packet to avoid
the overhead of having one IP/UDP/RTP packet per AMR frame. It is used by the
osmocom project.

Sponsored-by: On-Waves ehf
Change-Id: I8fb21e54adec8d8bd7ac5ebd2154100a73ab71c9
Reviewed-on: https://code.wireshark.org/review/16996
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
7 years agoLLDP: Update column info according to PROFINET requirements
Birol Capa [Tue, 16 Aug 2016 10:09:28 +0000 (13:09 +0300)]
LLDP: Update column info according to PROFINET requirements

Column information of LLDP frames should be updated according to PROFINET
requirements without changing the default behavior of column information.

Therefore, a new protocol setting is added.
This setting is used to display PROFINET specialized column information:
Edit-> Preferences -> Protocols -> Select LLDP

Bug: 12937
Change-Id: I48b78d0a3f6b3425f6f9c1d4be20dc24b143346d
Reviewed-on: https://code.wireshark.org/review/17081
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
7 years agoUpdate c-ares to 1.12.0
Pascal Quantin [Thu, 29 Sep 2016 19:47:29 +0000 (21:47 +0200)]
Update c-ares to 1.12.0

Change-Id: Icd70f5e4e5e1a41a6a188500874a893433ecb8ed
Reviewed-on: https://code.wireshark.org/review/17985
Petri-Dish: Pascal Quantin <pascal.quantin@gmail.com>
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
7 years agoQt: Add html_escape to qt_ui_utils.
Gerald Combs [Thu, 29 Sep 2016 18:25:52 +0000 (11:25 -0700)]
Qt: Add html_escape to qt_ui_utils.

Add an html_escape convenience function, which escapes HTML
metacharacters using Qt::escape on Qt4 and QString::toHtmlEscaped on
Qt5. Use it where we were previously using #if QT_VERSION and calling
the API-specific functions.

Change-Id: Ifda3e9634a37fc00bdb46e08d5711f934692fef5
Reviewed-on: https://code.wireshark.org/review/17984
Reviewed-by: Gerald Combs <gerald@wireshark.org>
Petri-Dish: Gerald Combs <gerald@wireshark.org>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Roland Knall <rknall@gmail.com>
7 years agomacosx-setup: Upgrade c-ares to 1.12.0.
Gerald Combs [Thu, 29 Sep 2016 15:33:24 +0000 (08:33 -0700)]
macosx-setup: Upgrade c-ares to 1.12.0.

Change the download protocol to https as well.

Change-Id: Id2043141d3b89449f2a0c739c05142af0a7b46ba
Reviewed-on: https://code.wireshark.org/review/17983
Reviewed-by: Gerald Combs <gerald@wireshark.org>
7 years agokismet: use ws_strtou64.
Dario Lombardo [Mon, 12 Sep 2016 12:18:30 +0000 (14:18 +0200)]
kismet: use ws_strtou64.

Add also an expert info when the time is invalid.

Change-Id: I8b3639aade41574cf1bda38f3ae1d02b09d0711c
Reviewed-on: https://code.wireshark.org/review/17678
Reviewed-by: Dario Lombardo <lomato@gmail.com>
7 years agoAdded HSMS dissector
Benjamin Parzella [Fri, 23 Sep 2016 13:58:34 +0000 (15:58 +0200)]
Added HSMS dissector

Bug: 12942
Change-Id: I69ab22caa9938167db421ca2f0346ca086280823
Reviewed-on: https://code.wireshark.org/review/17890
Reviewed-by: Michael Mann <mmann78@netscape.net>
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Dario Lombardo <lomato@gmail.com>
7 years agoproto.c use g_list_prepend when adding heuristic dissectors and plugins.
AndersBroman [Thu, 29 Sep 2016 11:03:41 +0000 (13:03 +0200)]
proto.c use g_list_prepend when adding heuristic dissectors and plugins.

Change-Id: If55938f0bad556a002fc85466c0b4f0e904991dc
Reviewed-on: https://code.wireshark.org/review/17981
Petri-Dish: Anders Broman <a.broman58@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agoTLS: Fix indent of SNI hello extension
Alexis La Goutte [Wed, 28 Sep 2016 11:48:23 +0000 (13:48 +0200)]
TLS: Fix indent of SNI hello extension

use 4 spaces

Change-Id: I0cbde19997f51046e6d5f22213b994a94a2998d6
Reviewed-on: https://code.wireshark.org/review/17978
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agoReplace some seeks forward with wtap_read_bytes() with a null buffer pointer.
Guy Harris [Thu, 29 Sep 2016 04:35:12 +0000 (21:35 -0700)]
Replace some seeks forward with wtap_read_bytes() with a null buffer pointer.

If the seek forward is just skipping record content that's not
(currently) interesting, use wtap_read_bytes() with a null buffer
pointer; it catches short "reads" and requires less seeking, so it may
work better when reading from a pipe.

Change-Id: Ifb07d20e0391a8ed97da85149d971b4e9ef093a8
Reviewed-on: https://code.wireshark.org/review/17976
Reviewed-by: Guy Harris <guy@alum.mit.edu>
7 years agoPROFINET: Fix variable may not have been initialized warning
Birol Capa [Wed, 28 Sep 2016 05:56:22 +0000 (08:56 +0300)]
PROFINET: Fix variable may not have been initialized warning

The variable may not have been initialized.
To make code more readable and to avoid possible future mistakes
initialize the variables.

Change-Id: I0c5e78b6d625c87252a4c47e263a3d5c701f2674
Reviewed-on: https://code.wireshark.org/review/17962
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
7 years agoTCP: Fix next sequence number for SYN/FIN packets with payload
Uli Heilmeier [Thu, 8 Sep 2016 14:00:29 +0000 (16:00 +0200)]
TCP: Fix next sequence number for SYN/FIN packets with payload

The next sequence number is off by one when there is TCP payload
in a SYN or FIN packet (e.g. when using TCP FastOpen).

Bug: 12579
Bug: 12838
Change-Id: Idb68cea4b4dcba39461019c08db09367cbfc6d68
Reviewed-on: https://code.wireshark.org/review/16239
Petri-Dish: Michael Mann <mmann78@netscape.net>
Reviewed-by: Michael Mann <mmann78@netscape.net>
7 years agopacket-couchbase.c: dissect body of DCP_FAILOVER_LOG response
Sergey Avseyev [Wed, 28 Sep 2016 21:19:45 +0000 (00:19 +0300)]
packet-couchbase.c: dissect body of DCP_FAILOVER_LOG response

Change-Id: Icbadcc83b5fedea4373d4c65a11700d73b3dc32e
Reviewed-on: https://code.wireshark.org/review/17972
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
7 years agoset PDML and PSML encoding to UTF-8. replace fputs() with fprintf() in writing PSML...
Dirk Jagdmann [Fri, 23 Sep 2016 08:46:16 +0000 (01:46 -0700)]
set PDML and PSML encoding to UTF-8. replace fputs() with fprintf() in writing PSML and PDML preambles for more consistent code formatting.

Change-Id: I57dbb27cbf935dd31342639b315d1fc98bd27d77
Reviewed-on: https://code.wireshark.org/review/17895
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
7 years agopacket-infiniband: Fix setting rocev2 udp port number
Parav Pandit [Wed, 28 Sep 2016 20:54:01 +0000 (20:54 +0000)]
packet-infiniband: Fix setting rocev2 udp port number

This patch sets RoCE-v2 (RRoCE) UDP port number to right value of
4791 as assigned by IANA described in below link.

http://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=RoCE#InfiniBand_Trade_Association

Change-Id: I97b82fb53fd63d9107ee5d4c64b94840e743fc72
Tested-by: pandit.parav@gmail.com
Reviewed-on: https://code.wireshark.org/review/17971
Reviewed-by: Michael Mann <mmann78@netscape.net>
7 years agoPROFINET: Fix switch statement has no default
Birol Capa [Wed, 28 Sep 2016 04:56:14 +0000 (07:56 +0300)]
PROFINET: Fix switch statement has no default

A switch statement has no section labeled default.
To make the code more readable add the default statement with a good comment.

Change-Id: Iacd9b1520628e229baedc89277d07ffac2caf1b6
Reviewed-on: https://code.wireshark.org/review/17960
Reviewed-by: Jaap Keuter <jaap.keuter@xs4all.nl>
Petri-Dish: Jaap Keuter <jaap.keuter@xs4all.nl>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
7 years agoPROFINET: Fix pointer variable 'fp' previously deallocated warning
Birol Capa [Wed, 28 Sep 2016 05:26:34 +0000 (08:26 +0300)]
PROFINET: Fix pointer variable 'fp' previously deallocated warning

'fp' pointer variable was freed or deleted in an earlier statement.

To make code more readable and to avoid possible future mistakes
make sure that developer sees this situation.

Change-Id: Ib5b9c4c32000adf05a30e094ebc98fe4bc4cfa52
Reviewed-on: https://code.wireshark.org/review/17961
Reviewed-by: Peter Wu <peter@lekensteyn.nl>
Petri-Dish: Peter Wu <peter@lekensteyn.nl>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
7 years agoUse wtap_read_bytes() to skip over bytes when reading a record.
Guy Harris [Wed, 28 Sep 2016 23:45:23 +0000 (16:45 -0700)]
Use wtap_read_bytes() to skip over bytes when reading a record.

Allow file_read() to take a null pointer as a buffer argument; a null
argument means "do everything except copy the bytes from the file to the
user buffer".  That means that wtap_read_bytes() and
wtap_read_bytes_or_eof() also support a null pointer as a buffer
argument.

Use wtap_read_bytes() with a null buffer argument rather than
file_skip() to skip forward over data.

This fixes some places where files were mis-identified as ERF files, as
the ERF open heuristics now get a short "read" error if they try to skip
over more bytes than exist in the file.

Change-Id: I4f73499d877c1f582e2bcf9b045034880cb09622
Reviewed-on: https://code.wireshark.org/review/17974
Reviewed-by: Guy Harris <guy@alum.mit.edu>
7 years agoPROFINET: Fix possibly passing a null pointer to function
Birol Capa [Tue, 27 Sep 2016 14:20:41 +0000 (17:20 +0300)]
PROFINET: Fix possibly passing a null pointer to function

A NULL pointer is possibly being passed to a function identified.

Change-Id: I87afb4fcd669451d94fecbcb827e7ff82d3e6740
Reviewed-on: https://code.wireshark.org/review/17950
Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Jaap Keuter <jaap.keuter@xs4all.nl>
7 years agopcep: Added rfc 7334 support.
Simon Zhong [Tue, 27 Sep 2016 21:28:53 +0000 (17:28 -0400)]
pcep: Added rfc 7334 support.
Updated PCEP-ERROR Object Error Types and Values base on Path Computation Element Protocol (PCEP) Numbers 2016-08-09 version

Change-Id: Ife0b49119a2b634279e33ab8f699a5dc57ecb34b
Reviewed-on: https://code.wireshark.org/review/17957
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agoDiameter: Add support for DRMP AVP
Marius Paliga [Wed, 28 Sep 2016 14:15:01 +0000 (16:15 +0200)]
Diameter: Add support for DRMP AVP

Bug: 12961
Change-Id: I4d9abbae3893916fdd317263a74398d2242f53de
Reviewed-on: https://code.wireshark.org/review/17969
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agofile_access: Use g_slist_prepend.
AndersBroman [Wed, 28 Sep 2016 12:38:41 +0000 (14:38 +0200)]
file_access: Use g_slist_prepend.

Change-Id: I6ed0f384e130ec9181e43b6262bb21d91f944dfa
Reviewed-on: https://code.wireshark.org/review/17968
Petri-Dish: Anders Broman <a.broman58@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agoUse g_slist_prepend, it should be faster if there's a lot of IP addresses
AndersBroman [Wed, 28 Sep 2016 11:31:14 +0000 (13:31 +0200)]
Use g_slist_prepend, it should be faster if there's a lot of IP addresses

Change-Id: I3861c0af24523315db6889b22ec93159174ba86f
Reviewed-on: https://code.wireshark.org/review/17966
Petri-Dish: Anders Broman <a.broman58@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agoeap: check scanf return value (CID 1373396).
Dario Lombardo [Wed, 28 Sep 2016 11:59:52 +0000 (13:59 +0200)]
eap: check scanf return value (CID 1373396).

Change-Id: I4b602110fc3959dd7214fe15e9c37e3870794c1d
Reviewed-on: https://code.wireshark.org/review/17967
Petri-Dish: Dario Lombardo <lomato@gmail.com>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Dario Lombardo <lomato@gmail.com>
7 years agoWhen regestering taps, only loop trough the list of taps once when adding
AndersBroman [Wed, 28 Sep 2016 10:09:58 +0000 (12:09 +0200)]
When regestering taps, only loop trough the list of taps once when adding
new taps.

Change-Id: Ida5ad2375c95664ee1b911d265cb69672db2be2d
Reviewed-on: https://code.wireshark.org/review/17964
Petri-Dish: Anders Broman <a.broman58@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agoproto_tree_add_item_ret_(u)int/proto_tree_add_bitmask_with_flags_ret_uint64: return...
Pascal Quantin [Tue, 27 Sep 2016 21:57:29 +0000 (23:57 +0200)]
proto_tree_add_item_ret_(u)int/proto_tree_add_bitmask_with_flags_ret_uint64: return real value

Apply mask and bit shift on the returned value.

Change-Id: I00aebc854756f01a25199a259d6d5252abea4349
Reviewed-on: https://code.wireshark.org/review/17958
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agocheckAPIs.pl: Avoid false positive in header
Roland Knall [Tue, 27 Sep 2016 16:55:08 +0000 (18:55 +0200)]
checkAPIs.pl: Avoid false positive in header

This avoids the text index being identified as shadow variable

Bug:12956
Change-Id: I5565c5807e2c7d317d6849deeba9edd63c069397
Reviewed-on: https://code.wireshark.org/review/17953
Petri-Dish: Roland Knall <rknall@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Graham Bloice <graham.bloice@trihedral.com>
7 years agotshark.c: fix indentation
Pascal Quantin [Tue, 27 Sep 2016 20:51:01 +0000 (22:51 +0200)]
tshark.c: fix indentation

Change-Id: Ie44f76a063f375df4ae85642cd0d011a0e233d60
Reviewed-on: https://code.wireshark.org/review/17956
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
7 years agotshark: register extcap preferences
Pascal Quantin [Tue, 27 Sep 2016 19:39:46 +0000 (21:39 +0200)]
tshark: register extcap preferences

Bug: 12949
Change-Id: I95ef8a15a2d629bbb351d34dbfc730fa5ea62cd5
Reviewed-on: https://code.wireshark.org/review/17954
Petri-Dish: Pascal Quantin <pascal.quantin@gmail.com>
Reviewed-by: Roland Knall <rknall@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
7 years ago[proto.c] proto_all_finfos(), pre-allocate array to hold all fields.
AndersBroman [Tue, 27 Sep 2016 09:01:14 +0000 (11:01 +0200)]
[proto.c] proto_all_finfos(), pre-allocate array to hold all fields.

Change-Id: I0d41e417e57e656ccee1c2ce6bd406af4ed23d10
Reviewed-on: https://code.wireshark.org/review/17948
Petri-Dish: Anders Broman <a.broman58@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agoQt+macOS: Look for San Francisco Mono
Gerald Combs [Thu, 22 Sep 2016 16:24:38 +0000 (09:24 -0700)]
Qt+macOS: Look for San Francisco Mono

Make San Francisco Mono the default monospace font on macOS. Note that
we should look for Ubuntu Mono on that platform.

Change-Id: I6f563099ae3797a7f73ea595158a2844581fbeec
Reviewed-on: https://code.wireshark.org/review/17867
Reviewed-by: Gerald Combs <gerald@wireshark.org>
Petri-Dish: Gerald Combs <gerald@wireshark.org>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agoTLS(1.3): Add Early Data (42) Hello extension
Alexis La Goutte [Thu, 22 Sep 2016 11:46:42 +0000 (13:46 +0200)]
TLS(1.3): Add Early Data (42) Hello extension

Bug:12779
Change-Id: I97470c6e6be6e3df707cf2f3634f2c1e9da26bc2
Reviewed-on: https://code.wireshark.org/review/17885
Petri-Dish: Peter Wu <peter@lekensteyn.nl>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agossl: fix crash when setting RSA key file without valid protocol
Peter Wu [Sat, 24 Sep 2016 11:09:36 +0000 (13:09 +0200)]
ssl: fix crash when setting RSA key file without valid protocol

If ssl_association_add is passed a NULL app_handle argument, it will
trigger DISSECTOR_ASSERT which fails due to the bad wmem scope
(wmem_packet_scope). Arguably DISSECTOR_ASSERT should not be used there,
but its alternative is g_warning/g_assert are not much different...

Fix the crash (assertion failure) by checking that the UAT-supplied
protocol is really valid. Normally the post_update_cb should not be
invoked if any of the fields are invalid, but that requires larger
changes in the Qt UAT dialog code.

Change-Id: Ie245213b650b1de9640db8dadd08f3ed2bff335f
Reviewed-on: https://code.wireshark.org/review/17906
Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agopcep: Added missed pieces of RFC 6006 support.
Simon Zhong [Sun, 25 Sep 2016 03:18:18 +0000 (23:18 -0400)]
pcep: Added missed pieces of RFC 6006 support.

Added display Object-Type number in string.

Change-Id: Icbb44aae2379f308f49bef7355e8c8c901889c15
Reviewed-on: https://code.wireshark.org/review/17910
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agoISAKMP: Rename identifiers and change item labels
Mirko Parthey [Fri, 23 Sep 2016 21:52:15 +0000 (23:52 +0200)]
ISAKMP: Rename identifiers and change item labels

Rename identifiers and change item labels to reflect their purpose:
* ISAKMP Phase 1 = IKE
* ISAKMP Phase 2 = IPsec
* IKEv2 Attribute = Transform Attribute
Remove "transform" and "type" where they do not apply.

External users of isakmp.tf.* field names, such as display filters,
have to be updated after this commit to use isakmp.ipsec.* instead.

old                                     new
--------------------------------------------------------------------
dissect_transform_attribute()           dissect_ipsec_attribute()
dissect_transform_ike_attribute()       dissect_ike_attribute()

ISAKMP_                                 IPSEC_

hf_isakmp_tf_attr                       hf_isakmp_ipsec_attr
isakmp.tf.                              isakmp.ipsec.

transform_ike_attr_type                 ike_attr_type
transform_isakmp_attr_type              ipsec_attr_type
transform_attr_sa_life_type             attr_life_type
transform_dh_group_type                 dh_group
transform_attr_encap_type               ipsec_attr_encap_mode
transform_attr_auth_type                ipsec_attr_auth_algo
transform_attr_ecn_type                 ipsec_attr_ecn_tunnel
transform_attr_ext_seq_nbr_type         ipsec_attr_ext_seq_nbr
transform_attr_addr_preservation_type   ipsec_attr_addr_preservation
transform_attr_sa_direction_type        ipsec_attr_sa_direction
transform_attr_enc_type                 ike_attr_enc_algo
transform_attr_hash_type                ike_attr_hash_algo
transform_attr_authmeth_type            ike_attr_authmeth
transform_attr_grp_type                 ike_attr_grp_type

Type Payload                            Payload
Transform IKE Attribute Type            IKE Attribute
Transform Attribute Type                IPsec Attribute
Transform IKE2 Attribute Type           Transform Attribute
Config Attribute Type                   Config Attribute
ISAKMP (v1)                             IKEv1
ISAKMP (v2)                             IKEv2
--------------------------------------------------------------------

Change-Id: Ib02a0bad100f932a290cae35ea4bd75b191f797b
Reviewed-on: https://code.wireshark.org/review/17914
Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years ago[proto.c] Add proto_find_first_finfo() to find first occurance of a field.
AndersBroman [Mon, 26 Sep 2016 13:04:34 +0000 (15:04 +0200)]
[proto.c] Add proto_find_first_finfo() to find first occurance of a field.

Change-Id: I11f50d7b00851880f77067260e2496175d227e76
Reviewed-on: https://code.wireshark.org/review/17937
Petri-Dish: Anders Broman <a.broman58@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agoWiX: Try to fix development upgrades.
Gerald Combs [Mon, 26 Sep 2016 23:19:42 +0000 (16:19 -0700)]
WiX: Try to fix development upgrades.

Try enabling the MajorUpgrade:AllowSameVersionUpgrades attribute. This
should keep the .msi packages from installing side by side when only
the micro version differs.

Change-Id: I37e8971d965ec1909c6baacb55d6a8062b13ff70
Reviewed-on: https://code.wireshark.org/review/17945
Reviewed-by: Gerald Combs <gerald@wireshark.org>
7 years agoAdd an initial "shellcheck" target.
Gerald Combs [Mon, 26 Sep 2016 17:34:04 +0000 (10:34 -0700)]
Add an initial "shellcheck" target.

Look for shellcheck in Autotools and CMake, and if found add a target
that checks some of our shell scripts.

Add a "source=" directive to targets that include test-common.sh so
that shellcheck will correctly process the scripts. Note that this
requires shellcheck 0.4.0 or later.

To do: Fix the issues that shellcheck found and check more scripts.

Change-Id: I441f9f59d8a3f8eec6718119c2370f2560b98f3c
Reviewed-on: https://code.wireshark.org/review/17943
Petri-Dish: Gerald Combs <gerald@wireshark.org>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Gerald Combs <gerald@wireshark.org>
7 years agoReorganize the source lists.
Guy Harris [Mon, 26 Sep 2016 21:39:45 +0000 (14:39 -0700)]
Reorganize the source lists.

For the different classes of generated dissectors, have
CLEAN_xxx_DISSECTOR_SRC with the ones that compile without warnings,
DIRTY_xxx_DISSECTOR_SRC for the ones that get warnings, and
xxx_DISSECTOR_SRC which is the combination of the two.

Add a new NCP2222_DISSECTOR_SRC for the packet-ncp2222.c dissector
generated by tools/ncp2222.py.  Add a new source group for it.

Move register.c to DISSECTOR_SUPPORT_SRC.  Get rid of
DISSECTOR_GENERATED_FILES; it's kind of a "none of the above" category,
and we now have an "above" for all files.

Include NCP2222_DISSECTOR_SRC in DISSECTOR_FILES.

Add an ALL_DISSECTOR_SRC that includes DISSECTOR_FILES and
CORBA_IDL_DISSECTOR_SRC (why are those kept separate?).  Use it for the
list of files we use to generate register.c.

Add NCP2222_DISSECTOR_SRC to CLEAN_FILES.

(Hopefully this makes it less likely that we'll forget to use -Werror
for clean dissector files or forget to use them to generate register.c.)

Change-Id: Ib9a7d10e1b9045516ef1f014046c6ff777c42be2
Reviewed-on: https://code.wireshark.org/review/17944
Petri-Dish: Guy Harris <guy@alum.mit.edu>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Guy Harris <guy@alum.mit.edu>
7 years agoRegister ncp2222 dissector
Peter Wu [Mon, 26 Sep 2016 13:54:06 +0000 (15:54 +0200)]
Register ncp2222 dissector

Otherwise a lot of ncp fields are missing.

Bug: 12945
Fixes: v2.1.0rc0-2918-g2e23b50 ("Add checkAPI calls to CMake.")
Change-Id: Ic46dc12c9a98b38d78ef988c0ce71f38e3163549
Reviewed-on: https://code.wireshark.org/review/17941
Petri-Dish: Jim Young <jim.young.ws@gmail.com>
Reviewed-by: Jim Young <jim.young.ws@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Guy Harris <guy@alum.mit.edu>
7 years agosshdump: restyle the output write routine.
Dario Lombardo [Thu, 15 Sep 2016 07:51:42 +0000 (09:51 +0200)]
sshdump: restyle the output write routine.

Bug: 12884
Change-Id: I90733bbcbbd8fafc0421b3fb9c6f9b48f178583c
Reviewed-on: https://code.wireshark.org/review/17710
Petri-Dish: Dario Lombardo <lomato@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Graham Bloice <graham.bloice@trihedral.com>
Reviewed-by: Dario Lombardo <lomato@gmail.com>
7 years agoBGP: Support for Cost, EIGRP and OSPF extended communities
Peter Palúch [Tue, 13 Sep 2016 13:07:57 +0000 (15:07 +0200)]
BGP: Support for Cost, EIGRP and OSPF extended communities

Bug: 12891
Change-Id: I70ed7f8a08122c559128b8df4d65e03be8201e1a
Reviewed-on: https://code.wireshark.org/review/17683
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Peter Palúch <Peter.Paluch@fri.uniza.sk>
Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
7 years agobtle: Fix Feature support bit positions
Stig Bjørlykke [Sun, 25 Sep 2016 08:29:37 +0000 (10:29 +0200)]
btle: Fix Feature support bit positions

From BT spec 4.2 volume 6 part B section 4.6, Feature support.

Bug: 12946
Change-Id: I065e9bc9af88bb1daf53d26ae683d7ddedbb8ebf
Reviewed-on: https://code.wireshark.org/review/17911
Petri-Dish: Stig Bjørlykke <stig@bjorlykke.org>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agobtle: Show full LL_VERSION_IND SubVersNr
Stig Bjørlykke [Sun, 25 Sep 2016 20:18:06 +0000 (22:18 +0200)]
btle: Show full LL_VERSION_IND SubVersNr

The BT spec does not specify a bitmask for Subversion Number.

Change-Id: If6f384badc4228ea1e1c30ec8156f382ca5959e0
Reviewed-on: https://code.wireshark.org/review/17936
Reviewed-by: Stig Bjørlykke <stig@bjorlykke.org>
7 years agobtle: Add LL_LENGTH_REQ/RSP control data
Stig Bjørlykke [Sun, 25 Sep 2016 18:17:29 +0000 (20:17 +0200)]
btle: Add LL_LENGTH_REQ/RSP control data

Change-Id: Ib09232a25c70fc319b1df90dc09a89a34cf59c3e
Reviewed-on: https://code.wireshark.org/review/17932
Petri-Dish: Stig Bjørlykke <stig@bjorlykke.org>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Stig Bjørlykke <stig@bjorlykke.org>
7 years agoDo GArray bounds checking.
Guy Harris [Sun, 25 Sep 2016 18:21:57 +0000 (11:21 -0700)]
Do GArray bounds checking.

Make sure we aren't going past the end of the array of per-interface
packet counts.

Change-Id: I6e19a5d375ebcc2193c37dc42c8f49836a5fd2c7
Reviewed-on: https://code.wireshark.org/review/17924
Reviewed-by: Guy Harris <guy@alum.mit.edu>
7 years agoReport failure to compile a filter as an error.
Guy Harris [Sun, 25 Sep 2016 18:02:27 +0000 (11:02 -0700)]
Report failure to compile a filter as an error.

The NCP dissector relies on those filters being compiled, and we end up
doing a g_assert() anyway; use g_error() to make sure the error gets
printed.

Change-Id: Ibc20407c1c08f0baaa626f269e9552ae11b36083
Ping-Bug: 12945
Reviewed-on: https://code.wireshark.org/review/17921
Reviewed-by: Guy Harris <guy@alum.mit.edu>
7 years ago[iscsi] Add a cast "packet-iscsi.c(625): warning C4267: 'function' :
AndersBroman [Sun, 25 Sep 2016 17:08:25 +0000 (19:08 +0200)]
[iscsi] Add a cast "packet-iscsi.c(625): warning C4267: 'function' :
conversion from 'size_t' to 'guint', possible loss of data"

Change-Id: I63ddf1384acdebc176a052489891d55d7a1b21ce
Reviewed-on: https://code.wireshark.org/review/17920
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years ago[Automatic update for 2016-09-25]
Gerald Combs [Sun, 25 Sep 2016 15:12:59 +0000 (08:12 -0700)]
[Automatic update for 2016-09-25]

Update manuf, services enterprise-numbers, translations, and other items.

Change-Id: Ie3096d67f82b93b751640e063ebe231fc235f83f
Reviewed-on: https://code.wireshark.org/review/17917
Reviewed-by: Gerald Combs <gerald@wireshark.org>
7 years agoieee80211: Fix EOSP flag dissection for mesh case
Masashi Honma [Thu, 8 Sep 2016 09:44:00 +0000 (18:44 +0900)]
ieee80211: Fix EOSP flag dissection for mesh case

Change-Id: Ia8d4d74a7f0f5795790f930fc1e894a7ee202da7
Signed-off-by: Masashi Honma <masashi.honma@gmail.com>
Reviewed-on: https://code.wireshark.org/review/17550
Reviewed-by: Michael Mann <mmann78@netscape.net>
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agoImprove HART dissector
rosemountSkp [Thu, 25 Aug 2016 14:19:41 +0000 (14:19 +0000)]
Improve HART dissector

Fixed short command 0 short address,
command 0 that has less bytes,
command 9 byte count,
command 48 parse first 6 bytes instead of 5 and
the command may has less bytes, pass correct byte count into the
dissect_parse_hart_cmds() function.

Added support HART published and NAK message types and more HART commands.

Bug: 12817
Change-Id: I4a9e7f9b342346ff4ecdcd06a73238c1a08d00fc
Reviewed-on: https://code.wireshark.org/review/17325
Reviewed-by: Michael Mann <mmann78@netscape.net>
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agoeap: add imsi to wlan identity dissection.
Dario Lombardo [Fri, 23 Sep 2016 12:31:34 +0000 (14:31 +0200)]
eap: add imsi to wlan identity dissection.

Change-Id: Ic8ff4e1846e8c0a11ee19ffbc4897635388dfa62
Reviewed-on: https://code.wireshark.org/review/17888
Petri-Dish: Dario Lombardo <lomato@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
7 years agossh: use ws_strtoi function.
Dario Lombardo [Tue, 20 Sep 2016 15:49:50 +0000 (17:49 +0200)]
ssh: use ws_strtoi function.

Change-Id: Iafcb721eb6081902dd6b5c3a2258ae5c2ccd95e9
Reviewed-on: https://code.wireshark.org/review/17822
Reviewed-by: Michael Mann <mmann78@netscape.net>
7 years agoidl2wrs: use ws_strtou function
Dario Lombardo [Wed, 21 Sep 2016 13:03:28 +0000 (15:03 +0200)]
idl2wrs: use ws_strtou function

Change-Id: I90173b0defc04ac80054170153afe9389def620b
Reviewed-on: https://code.wireshark.org/review/17837
Petri-Dish: Dario Lombardo <lomato@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
7 years agoiscsi: use ws_strtou functions.
Dario Lombardo [Thu, 22 Sep 2016 12:45:52 +0000 (14:45 +0200)]
iscsi: use ws_strtou functions.

Add expert info for failed conversion.

Change-Id: I03d5e2db791f81d43384bb047c268d07709a6099
Reviewed-on: https://code.wireshark.org/review/17863
Petri-Dish: Dario Lombardo <lomato@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
7 years agoChanges to 1722.1 / MAAP to work with 1722 draft15
Andreas Leibold [Mon, 12 Sep 2016 12:51:51 +0000 (14:51 +0200)]
Changes to 1722.1 / MAAP to work with 1722 draft15

The C/D control flag was integrated in the subtype field of 1722 after
draft 6. These changes are now added to the 1722-1 and MAAP protocol.

Change-Id: I19b2e8237fb87d42ec7bcb6f9f53e8cc8605731d
Reviewed-on: https://code.wireshark.org/review/17664
Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
7 years agossl: fix exact matching of ALPN protocol names
Peter Wu [Sat, 24 Sep 2016 13:11:32 +0000 (15:11 +0200)]
ssl: fix exact matching of ALPN protocol names

The "name_length >= alpn_proto->proto_name_len" condition always failed
to match for short names (like "h2" where the reported length is 2, but
the proto_name_len would be 3).

This fixes recognition of HTTP/2 traffic, without this patch it would be
interpreted as http-over-tls as reported on
https://ask.wireshark.org/questions/55720/how-to-install-http2-dissector-plugin

Change-Id: Idc3eae0b6d593c8f3c435230ef76da90a4b1e7fc
Reviewed-on: https://code.wireshark.org/review/17907
Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
7 years agodoc: add the -d (decode as) option to wireshark(1)
Peter Wu [Sat, 24 Sep 2016 10:16:08 +0000 (12:16 +0200)]
doc: add the -d (decode as) option to wireshark(1)

Text is partially copied from the tshark manual page.

Change-Id: I120e327f15394fc48fce6e4a122e7eab83e91c82
Reviewed-on: https://code.wireshark.org/review/17904
Reviewed-by: Michael Mann <mmann78@netscape.net>
7 years agoEditcap: Fix comparsion between signed and unsigned int
Uli Heilmeier [Sat, 24 Sep 2016 09:17:17 +0000 (11:17 +0200)]
Editcap: Fix comparsion between signed and unsigned int

secs_per_block is a unsigned integer. Therefore we can't
compare a signed integer with it.

Change-Id: Ic965a88e0e704e296c4af9193ca4a3504173ae36
Reviewed-on: https://code.wireshark.org/review/17901
Reviewed-by: Peter Wu <peter@lekensteyn.nl>
Petri-Dish: Peter Wu <peter@lekensteyn.nl>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
7 years agoCheck for ASAN when fuzzing.
Gerald Combs [Wed, 21 Sep 2016 22:38:16 +0000 (15:38 -0700)]
Check for ASAN when fuzzing.

Try to determine if we passed -fsanitize=address to gcc or clang and
adjust the ASAN variable fuzz-test.sh, randpkt-test.sh and
test-captures.sh accordingly.

Change-Id: I88a34828fb5875e1a74a3b180ffb3da37daac0bd
Reviewed-on: https://code.wireshark.org/review/17848
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>