[Wireshark-dev] Re: HTTP Zstandard (zstd) - Unreleased Merge Request?

2025-08-07 Thread Jaap Keuter via Wireshark-dev
slated to be released on some later date? What's the process of getting > this published? > > Thanks _______ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] Wireshark Technical Steering Committee Election Results

2025-07-18 Thread WTSC Elections via Wireshark-dev
Graham and Pascal, both for serving on the WTSC and for their help in getting the Wireshark Foundation up and running. Thanks also to the candidates and voters for helping to ensure that Wireshark has good and sustainable governance! ___ Wireshark-dev

[Wireshark-dev] Wireshark 4.4.8 is now available

2025-07-16 Thread Gerald Combs via Wireshark-dev
ing commands (among others): Windows: certutil -hashfile Wireshark-win64-x.y.z.exe SHA256 Linux (GNU Coreutils): sha256sum wireshark-x.y.z.tar.xz macOS: shasum -a 256 "Wireshark x.y.z Arm 64.dmg" Other: openssl sha256 wireshark-x.y.z.tar.xz OpenPGP_signature.asc Description: OpenPGP digital signature ___ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] Final reminder: Call for Election: Wireshark Technical Steering Committee (WTSC)

2025-07-14 Thread WTSC Elections via Wireshark-dev
on.org/pdf/wtsc-charter-2024-05-01.pdf <https://wiresharkfoundation.org/pdf/wtsc-charter-2024-05-01.pdf> Let's come together to shape the future of Wireshark. Cast your vote and make your voice heard! On behalf of the WTSC voting commission: Eugène Adell Darius Davis Uli Heilmeier_____

[Wireshark-dev] Reminder: Call for Election: Wireshark Technical Steering Committee (WTSC)

2025-07-11 Thread WTSC Elections via Wireshark-dev
your vote and make your voice heard! On behalf of the WTSC voting commission: Eugène Adell Darius Davis Uli Heilmeier___________ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] Re: [WIP Seeking Review] nl80211: Add cipher suite dissection

2025-07-11 Thread Alex Gavin via Wireshark-dev
e referencing. > > One additional item I'm seeking feedback on, aside from patch > functionality, is 'AKMS_*' definitions > location. They are presently in the 'packet-ieee80211.c' dissector. I'd > like to move them to the > 'packet-ieee80

[Wireshark-dev] Re: [WIP Seeking Review] nl80211: Add cipher suite dissection

2025-07-11 Thread Alex Gavin via Wireshark-dev
I'd like to move them to the 'packet-ieee80211.h' file which is already included by the nl80211 dissector. > On 11/07/2025 00:56, Alex Gavin via Wireshark-dev wrote: >> Presently this dissection only properly dissects one >> cipher suite of the several that are in the

[Wireshark-dev] [WIP Seeking Review] nl80211: Add cipher suite dissection

2025-07-11 Thread Alex Gavin via Wireshark-dev
11_cipher_suites_vals_ext, 0x0, + NULL, HFILL }, +}, /* Extracted using tools/generate-nl80211-fields.py */ /* Definitions from linux/nl80211.h {{{ */ { &hf_nl80211_commands, @@ -5371,6 +5448,7 @@ proto_register_netlink_nl80211(void) &ett_nl80211, &ett_nl802

[Wireshark-dev] Re: Confirm

2025-07-10 Thread Jaap Keuter via Wireshark-dev
Hi > On 11 Jul 2025, at 07:18, tabby Smith wrote: > > ___ > Wireshark-dev mailing list -- wireshark-dev@wireshark.org > To unsubscribe send an email to wireshark-dev-le...@wireshark.org ______

[Wireshark-dev] Re: Regarding ISIS TLV - 139 support in wireshark

2025-07-09 Thread Jaap Keuter via Wireshark-dev
f there are any plans to provide support for IS-IS TLV - 139 > support in wireshark. Appreciate if you can let me know. > > Thanks > Gaurav > _______ > Wireshark-dev mailing list -- wireshark-dev@wireshark.org > To unsubscri

[Wireshark-dev] Wireshark build failure on Windows 11

2025-07-03 Thread Maynard, Chris via Wireshark-dev
is message or its attachments is strictly prohibited. ___ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] Re: Changes in the latest dev code (since 4.4.7) which heavily impacted PROTO_TREE_MAX_IDLE

2025-06-26 Thread Gerald Combs via Wireshark-dev
of the other options. John On Wed, Jun 25, 2025 at 11:30 PM Tamás Regős wrote: I just checked the source code of 4.4.7 and it does not have this merge included so that is why it works. packet-nr-rrc is quite long and complex (and generated from asn1) and it may conflict

[Wireshark-dev] Call for Election: Wireshark Technical Steering Committee (WTSC)

2025-06-26 Thread WTSC Elections via Wireshark-dev
/wtsc-charter-2024-05-01.pdf <https://wiresharkfoundation.org/pdf/wtsc-charter-2024-05-01.pdf> Let's come together to shape the future of Wireshark. Cast your vote and make your voice heard! On behalf of the WTSC voting commission: Eugène Adell Darius Davis Uli Heilmeier_______

[Wireshark-dev] Call for Election: Wireshark Technical Steering Committee (WTSC)

2025-06-26 Thread WTSC Elections via Wireshark-dev
x27;s come together to shape the future of Wireshark. Cast your vote and make your voice heard! On behalf of the WTSC voting commission: Eugène Adell Darius Davis Uli Heilmeier ___ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe se

[Wireshark-dev] Re: Changes in the latest dev code (since 4.4.7) which heavily impacted PROTO_TREE_MAX_IDLE

2025-06-25 Thread Gilbert Ramirez via Wireshark-dev
's > reset) and the "*PROTO_TREE_MAX_IDLE* *5*" in proto.c is not enough > anymore. > > I was testing with higher values and ended up with "*PROTO_TREE_MAX_IDLE* > *93100*" to make it work and be able to decode the packet (93000 still > failed

[Wireshark-dev] g_new0() allocation in init_iousers()

2025-06-14 Thread Rustam Kovhaev via Wireshark-dev
much! ___ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] Wireshark 4.4.7 is now available

2025-06-04 Thread Gerald Combs via Wireshark-dev
inux (GNU Coreutils): sha256sum wireshark-x.y.z.tar.xz macOS: shasum -a 256 "Wireshark x.y.z Arm 64.dmg" Other: openssl sha256 wireshark-x.y.z.tar.xz OpenPGP_signature.asc Description: OpenPGP digital signature ___ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] Re: Packet visited more than once?

2025-05-22 Thread Yaniv Kaul via Wireshark-dev
On Thu, May 22, 2025 at 10:26 PM John Thacker wrote: > On Thu, May 22, 2025 at 2:55 PM Yaniv Kaul via Wireshark-dev < > wireshark-dev@wireshark.org> wrote: > >> >> >> On Thu, 22 May 2025, 21:20 John Thacker, wrote: >> >>> I don't underst

[Wireshark-dev] Re: Packet visited more than once?

2025-05-22 Thread Yaniv Kaul via Wireshark-dev
On Thu, 22 May 2025, 21:20 John Thacker, wrote: > On Thu, May 22, 2025 at 12:49 PM Yaniv Kaul via Wireshark-dev < > wireshark-dev@wireshark.org> wrote: > >> >> >> On Thu, May 22, 2025 at 6:53 PM John Thacker >> wrote: >> This is done for several re

[Wireshark-dev] Re: Packet visited more than once?

2025-05-22 Thread Yaniv Kaul via Wireshark-dev
On Thu, May 22, 2025 at 6:53 PM John Thacker wrote: > On Thu, May 22, 2025 at 11:22 AM Yaniv Kaul via Wireshark-dev < > wireshark-dev@wireshark.org> wrote: > >> I have some issue with the dissector going over my packets more than once. >> There's a legitimate

[Wireshark-dev] Re: Packet visited more than once?

2025-05-22 Thread Yaniv Kaul via Wireshark-dev
good idea > here. You should not need it to get the length back. Rather the dissecting > method should return the remaining bytes and you can remove that from the > length reported. > It's indeed a horrible idea. In the past ( https://lists.wireshark.org/archives/wireshark-dev/2

[Wireshark-dev] Packet visited more than once?

2025-05-22 Thread Yaniv Kaul via Wireshark-dev
treaming, compression, etc.) TIA, Y. _______ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] Re: Windows build failure

2025-05-20 Thread Maynard, Chris via Wireshark-dev
Wireshark Subject: [Wireshark-dev] Re: Windows build failure The Qt deprecation warning is because of QCustomPlot which is 3rd party code- we have disabled failing compilation on those warnings while waiting for a fix there, but it's taken a while ( https://www.qcustomplot.com/index.php/support/

[Wireshark-dev] Re: Windows build failure

2025-05-20 Thread Maynard, Chris via Wireshark-dev
c\master\ui\qt\widgets\qcustomplot.cpp(6827,15): warning C 4996: 'QDate::startOfDay': Pass QTimeZone instead [C:\Wireshark\builds\x64\ master\ui\qt\qtui.vcxproj] 3 Warning(s) 0 Error(s) From: Maynard, Chris via Wireshark-dev Sent: Monday, May 19, 2025 2:23 PM To: Devel

[Wireshark-dev] Re: Windows build failure

2025-05-19 Thread Maynard, Chris via Wireshark-dev
ule;C:\Wireshark\src\master\ui\qt\CMakeLists.txt' exited with code -1073741819. [C:\Wireshark\builds\x64\master\ui\qt\qtui_autogen.vcxpr oj] 1 Warning(s) 1 Error(s) - Chris From: John Thacker Sent: Friday, May 16, 2025 7:57 AM To: Developer support list for Wireshark S

[Wireshark-dev] launchpad.net repository

2025-05-17 Thread ROGGEMAN Yves via Wireshark-dev
Any hope for a Plucky version in Wireshark stable repositories? Thanks, Yves Roggeman ___ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] Windows build failure

2025-05-15 Thread Maynard, Chris via Wireshark-dev
ge is intended solely for the use of the addressee. If you are not the intended recipient and have received this message in error, please delete this message from your system. Any unauthorized reading, distribution, copying, or other use of this message or its attachments is strictly prohibited. ___ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] Re: wiretap vs text2pcap

2025-05-05 Thread Michael Mann via Wireshark-dev
; like I would want for the PEAK wiretap interface. On Monday, May 5, 2025 at 01:43:19 PM EDT, Guy Harris wrote: On May 5, 2025, at 8:24 AM, Michael Mann via Wireshark-dev wrote: > There have been several times where I've been given a simple, text-based > capture file fo

[Wireshark-dev] Pre-built third party libraries for macOS

2025-05-05 Thread Gerald Combs via Wireshark-dev
ight be able to fix issue #17294 as well. ___________ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] wiretap vs text2pcap

2025-05-05 Thread Michael Mann via Wireshark-dev
png.c the only source of what I'll have to look at as an "example"?  Can anyone provide more pointers on my desire to have "text2pcap functionality in wiretap", to make it easier to provide wiretaps for future (simple) text-based packet data. Thanks,Michael ___

[Wireshark-dev] Re: Discussion: Untangling the situation with the Darwin process metadata

2025-04-28 Thread Omer Shapira via Wireshark-dev
> https://github.com/IETF-OPSAWG-WG/draft-ietf-opsawg-pcap/issues/164 >> >> https://github.com/google/linux-sensor/blob/master/hone-pcapng.txt and >> https://github.com/HoneProject/Linux-Sensor/wiki/Augmented-PCAP-Next-Generation-Dump-File-Format > > Those ideas

[Wireshark-dev] Re: Discussion: Untangling the situation with the Darwin process metadata

2025-04-28 Thread Omer Shapira via Wireshark-dev
ft-ietf-opsawg-pcap/issues/164 > > https://github.com/google/linux-sensor/blob/master/hone-pcapng.txt and > https://github.com/HoneProject/Linux-Sensor/wiki/Augmented-PCAP-Next-Generation-Dump-File-Format Those ideas appear to be related but not *same*. I would rather not increase the s

[Wireshark-dev] Re: Discussion: Untangling the situation with the Darwin process metadata

2025-04-25 Thread Omer Shapira via Wireshark-dev
> On Apr 25, 2025, at 6:07 AM, Anders Broman wrote: > > > > Den fre 25 apr. 2025 kl 02:38 skrev Omer Shapira via Wireshark-dev > mailto:wireshark-dev@wireshark.org>>: >> >> >> > On Apr 24, 2025, at 4:29 PM, Guy Harris > > <mailto:ghar.

[Wireshark-dev] Re: Discussion: Untangling the situation with the Darwin process metadata

2025-04-24 Thread Omer Shapira via Wireshark-dev
> On Apr 24, 2025, at 4:29 PM, Guy Harris wrote: > > On Apr 24, 2025, at 2:56 PM, Omer Shapira via Wireshark-dev > wrote: > >> Unfortunately, when the support for the process metadata was added, the team >> missed the opportunity to do the right thing and

[Wireshark-dev] Discussion: Untangling the situation with the Darwin process metadata

2025-04-24 Thread Omer Shapira via Wireshark-dev
kwards compatibility. ___ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] Representing multiple timestamps for a packet

2025-04-22 Thread Omer Shapira via Wireshark-dev
r, but I wonder what the Wireshark community can suggest? Best regards, - oesh _______ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] PSM-18347 Wireshark is now available

2025-04-17 Thread Jacob Fisher via Wireshark-dev
YkZx7eRY0-75mJDwUFfk2Ax9t2973iY This is shared with wireshark-dev@wireshark.org -- Powered by Jira Service Management https://www.atlassian.com/software/jira/service-desk/powered-by?utm_medium=jira-in-product&utm_source=jira_service_desk_email_footer&utm_

[Wireshark-dev] PSM-18339 Wireshark 4.4.6 is now available

2025-04-17 Thread Jacob Fisher via Wireshark-dev
I3YmE1OGI0OmQ3Y2M3ZTk3LTI2ZTUtNDNiNC04YWZiLTkzMWFjYzA3OGE2MiIsImlzc3VlIjoiUFNNLTE4MzM5In0sImV4cCI6MTc0NzI5MzcxMSwiaWF0IjoxNzQ0ODc0NTExfQ.mJWEZ7bbzvql6CSI1oTYvjXeviksH9U7YUC8LwvUDJA This is shared with wireshark-dev@wireshark.org -- Powered by Jira Service Management https://www.atlassian.com/software/jir

[Wireshark-dev] Wireshark 4.4.6 is now available

2025-04-16 Thread Gerald Combs via Wireshark-dev
SHA256 Linux (GNU Coreutils): sha256sum wireshark-x.y.z.tar.xz macOS: shasum -a 256 "Wireshark x.y.z Arm 64.dmg" Other: openssl sha256 wireshark-x.y.z.tar.xz ___ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] PSM-18339 Wireshark 4.4.6 is now available

2025-04-16 Thread PenCarrie Service Management via Wireshark-dev
I3YmE1OGI0OmQ3Y2M3ZTk3LTI2ZTUtNDNiNC04YWZiLTkzMWFjYzA3OGE2MiIsImlzc3VlIjoiUFNNLTE4MzM5In0sImV4cCI6MTc0NzI0NjI5MiwiaWF0IjoxNzQ0ODI3MDkyfQ.HBxdo2w0xi34KmXMFHCEZzk7E1mBu9KdEPzdo8nvaEc This is shared with wireshark-dev@wireshark.org -- Powered by Jira Service Management https://www.atlassian.com/software/jira/service-desk/powered-by?utm_medium=jira-in-product&utm_source=jira_service_desk_email_foote

[Wireshark-dev] Re: wireshark crashes on some windows PC when click Telephony > Rtpstreams

2025-04-13 Thread Gisle Vanem via Wireshark-dev
e=21&entry=problem&sort=newest The fix for Wireshark could be to add '-D_DISABLE_CONSTEXPR_MUTEX_CONSTRUCTOR' to the build CFLAGS. -- --gv _______ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] Re: Dissecting MASQUE

2025-04-05 Thread Omer Shapira via Wireshark-dev
ssection the other day: https://gitlab.com/wireshark/wireshark/-/commit/8564c8d525ddf0e9b46453a705b3f862a1923c62 Back then I was still very deep in discussions with the Apple Legal department, and my hands were tied. > Best regards > Anders > > > Den tis 1 apr. 2025 18

[Wireshark-dev] PSM-17931 Outdated and potentially vulnerable embedded software | Wireshark 4.4.4.

2025-04-04 Thread Lewis Gallagher via Wireshark-dev
IUzI1NiJ9.eyJ0Z3QiOiJhbm9ueW1vdXMtbGluayIsInFzaCI6ImU3MjU4MWFhMjc5NTlhZWU3ZDE3ZWJmZjc4YjIxZjQwY2VmNjRkM2JiM2ZkMzc3MmRmZmNlOGFmNTUzODJjMDkiLCJpc3MiOiJzZXJ2aWNlZGVzay1qd3QtdG9rZW4taXNzdWVyIiwiY29udGV4dCI6eyJ1c2VyIjoicW06NjMwNmU2ZDMtYjVkMS00OTdhLThhNTMtNzc5MmI3YmE1OGI0OmQ3Y2M3ZTk3LTI2ZTUtNDNiNC04YWZiLTkzMWFjYzA3OGE2MiIsImlzc3VlIjoiUFNNLTE3OTMxIn0sImV4cCI6MTc0NTg1MzMyMiwiaWF0IjoxNzQzNDM0MTIyfQ.43CdO10657zhpfvnPGUYqrAf_e_zzlpG2yj4xfB24MU This is shared with wireshark-dev@wire

[Wireshark-dev] Dissecting MASQUE

2025-04-02 Thread Omer Shapira via Wireshark-dev
Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] Dissecting MASQUE

2025-04-01 Thread Omer Shapira via Wireshark-dev
Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] PSM-17931 Outdated and potentially vulnerable embedded software | Wireshark 4.4.4.

2025-03-31 Thread PenCarrie Service Management via Wireshark-dev
U4nyW2-KE-2Gi1MTjWVOWqgkT_ea0MCw9Ww This is shared with wireshark-dev@wireshark.org -- Powered by Jira Service Management https://www.atlassian.com/software/jira/service-desk/powered-by?utm_medium=jira-in-product&utm_source=jira_service_desk_email_foote

[Wireshark-dev] Outdated and potentially vulnerable embedded software | Wireshark 4.4.4.

2025-03-31 Thread EXT-Modrell, Anthony via Wireshark-dev
...@boeing.com> ___________ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] Re: On dissection of GSM A DTAP BCC Call State

2025-03-10 Thread Pascal Quantin via Wireshark-dev
confirmation. > I agree with your analysis, the correct width should be 1. Cheers, Pascal. ___ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] Re: DHCP dissector giving up too early ?

2025-03-07 Thread Martin Nyhus via Wireshark-dev
b.com/wireshark/wireshark/-/issues/20097 ___ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] Re: Possible Typographical Error in Wireshark Documentation

2025-02-27 Thread Gerald Combs via Wireshark-dev
menu item's function. Thank You -- З повагою, Антон Дьяченко (an...@dyachenko.pp.ua <mailto:an...@dyachenko.pp.ua>) -- З повагою, Антон Дьяченко (an...@dyachenko.pp.ua <mailto:an...@dyachenko.pp.ua>)

[Wireshark-dev] Wireshark 4.4.5 is now available

2025-02-24 Thread Gerald Combs via Wireshark-dev
ile Wireshark-win64-x.y.z.exe SHA256 Linux (GNU Coreutils): sha256sum wireshark-x.y.z.tar.xz macOS: shasum -a 256 "Wireshark x.y.z Arm 64.dmg" Other: openssl sha256 wireshark-x.y.z.tar.xz ___ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] Wireshark 4.4.4 is now available

2025-02-19 Thread Gerald Combs via Wireshark-dev
y.z.tar.xz macOS: shasum -a 256 "Wireshark x.y.z Arm 64.dmg" Other: openssl sha256 wireshark-x.y.z.tar.xz OpenPGP_signature.asc Description: OpenPGP digital signature ___ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] Wireshark 4.4.4 is now available

2025-02-19 Thread Gerald Combs via Wireshark-dev
Linux (GNU Coreutils): sha256sum wireshark-x.y.z.tar.xz macOS: shasum -a 256 "Wireshark x.y.z Arm 64.dmg" Other: openssl sha256 wireshark-x.y.z.tar.xz ___ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] Trying to understand Stratoshark

2025-02-06 Thread Martin Mathieson via Wireshark-dev
ng-threats rules? Anyway, the first thing I would like to do with Stratoshark is to sanity-check Wireshark starting up and shutting down. At least we should see the file reads/writes we do, and look into anything fishy. Any help would be appreciated. Thanks, Martin ________

[Wireshark-dev] byte range selections in tshark -e fields

2025-01-10 Thread Cristian Constantin via Wireshark-dev
, cristian ___ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] Re: dpkg-buildpackage fails with recent tags

2024-12-15 Thread Elimork Bald via Wireshark-dev
fferent wireshark packages already and if anything goes wrong, I'll seek advice here, but so far, no issues. Thanks again devs! > > Sent with Proton Mail secure email. _______________ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To

[Wireshark-dev] Re: dpkg-buildpackage fails with recent tags

2024-12-14 Thread Elimork Bald via Wireshark-dev
On Sunday, December 15th, 2024 at 3:53 AM, Elimork Bald via Wireshark-dev wrote: > The 'dpkg-buildpackage' nocheck option is unappealing to me. I'll try and see > what pytest will tell me, next. In dir where I ran dpkg-buildpackage with those errors, I ran: pytest test/s

[Wireshark-dev] Re: dpkg-buildpackage fails with recent tags

2024-12-14 Thread Elimork Bald via Wireshark-dev
all-test-deps to have them. The 'dpkg-buildpackage' nocheck option is unappealing to me. I'll try and see what pytest will tell me, next. ___________ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] dpkg-buildpackage fails with recent tags

2024-12-14 Thread Elimork Bald via Wireshark-dev
, usually. What could this be? How to solve it? Thanks in advance! Elimork Sent with Proton Mail secure email. _______ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] How to get the PDU length of a 'mutating' protocol?

2024-12-04 Thread Yaniv Kaul via Wireshark-dev
E); } else { return 0; } } } TIA, Y. [1] https://github.com/scylladb/seastar/blob/master/doc/rpc.md _______ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] MacOS Build issues

2024-10-11 Thread John Schimmel via Wireshark-dev
admin 363168 Oct 9 19:59 libcares_static.a drwxr-xr-x 3 jes admin 96 Oct 10 15:00 pkgconfig Any help would be appreciated. Thanks, John _______ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] [PATCH 04/16] NFS: Fix detection of NFS4 packets

2024-09-14 Thread Pali Rohár via Wireshark-dev
HEURISTIC_ENABLE); heur_dissector_add("tls", dissect_rpc_tls_heur, "RPC with TLS", "rpc_tls", proto_rpc, HEURISTIC_ENABLE); -- 2.20.1 _______ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] [PATCH 13/16] NFS: Fix dissecting NFS4 mode

2024-09-14 Thread Pali Rohár via Wireshark-dev
mp;hf_nfs2_mode_exec_other, + NULL + }; + + proto_tree_add_bitmask(tree, tvb, offset, hf_nfs2_mode, ett_nfs2_mode, modes, ENC_BIG_ENDIAN); + + offset += 4; + return offset; } #define FH4_PERSISTENT 0x -- 2.20.1 ___________ Wireshark-de

[Wireshark-dev] [PATCH 12/16] NFS: Consistently show NFS4 fileid in decimal notation, including mounted_on_fileid

2024-09-14 Thread Pali Rohár via Wireshark-dev
fs.fattr4.mounted_on_fileid", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, { &hf_nfs4_fattr_layout_blksize, { -- 2.20.1 ___________ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] [PATCH 16/16] NFS: Add support for NFSv4 filename snooping

2024-09-14 Thread Pali Rohár via Wireshark-dev
se NFS4_OP_CB_NOTIFY_DEVICEID: break; case NFS4_OP_CB_OFFLOAD: - offset = dissect_nfs4_fh(tvb, offset, pinfo, newftree, "FileHandle", NULL, civ); + offset = dissect_nfs4_fh(tvb, offset, pinfo, newftree, "F

[Wireshark-dev] [PATCH 07/16] NFS: Always show all possible NFS access bits for ACCESS calls and replies

2024-09-14 Thread Pali Rohár via Wireshark-dev
roto_tree* display_access_items(tvbuff_t* tvb, int offset, packet_info* pinfo, - proto_tree* tree, uint32_t amask, char mtype, int version, + proto_tree* tree, uint32_t amask, uint32_t rmask, char mtype, int version,

[Wireshark-dev] [PATCH 08/16] NFS: Update comment about NFS4 callback versions

2024-09-14 Thread Pali Rohár via Wireshark-dev
nd NFSv4.2 protocols. + * Other versions (including 2 and 3) are not defined nor used yet. */ static const rpc_prog_vers_info nfs_cb_vers_info[] = { { 1, nfs_cb_proc, &hf_nfs4_cb_procedure }, -- 2.20.1 _______ Wireshark-dev mailing list --

[Wireshark-dev] [PATCH 11/16] NFS: Dissect NFS4 nfstime4 into human readable form

2024-09-14 Thread Pali Rohár via Wireshark-dev
,7 @@ proto_register_nfs(void) &ett_nfs4_listxattr_names, &ett_nfs4_notify_delay, &ett_nfs4_notify_attrs, + &ett_nfs4_nfstime, }; static ei_register_info ei[] = { -- 2.20.1 ___ W

[Wireshark-dev] [PATCH 15/16] NFS: Use 64-bit key for filename snooping hashtable

2024-09-14 Thread Pali Rohár via Wireshark-dev
_name(uint64_t xid, tvbuff_t *tvb, int name_offset, int name_len, int parent_offset, int parent_len, const char *name); extern bool nfs_fhandle_reqrep_matching; extern int dissect_fhandle(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, -- 2.20

[Wireshark-dev] [PATCH 14/16] NFS: Fix dissecting NFS4 CREATE_SESSION cb_sec_params

2024-09-14 Thread Pali Rohár via Wireshark-dev
_nfs4_rdmachanattrs, + &ett_nfs4_sec_parms_array, + &ett_nfs4_sec_parms_item, + &ett_nfs4_gids, &ett_nfs4_machinename, &ett_nfs4_flavor, &ett_nfs4_stamp, -- 2.20.1 __________

[Wireshark-dev] [PATCH 02/16] NFS: Fix NFSv2/v3 SYMLINK and MKNOD filename snooping

2024-09-14 Thread Pali Rohár via Wireshark-dev
;proc == 8)||(civ->proc == 9)) + &&((civ->proc == 3)||(civ->proc == 8)||(civ->proc == 9)||(civ->proc == 10)||(civ->proc == 11)) ) { nfs_name_snoop_add_name(civ->xid, tvb, name_offset, name_len, -- 2.20.1 ___ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] [PATCH 03/16] NFS: Remove broken NFSv4 filename snooping

2024-09-14 Thread Pali Rohár via Wireshark-dev
wmem_strbuf_append_printf (op_summary[ops_counter].optext, "DH: 0x%08x/", last_fh_hash); -- 2.20.1 ___________ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] [PATCH 06/16] NFS: Dissect NFS4 create_session callback parameters: flavor and gss service

2024-09-14 Thread Pali Rohár via Wireshark-dev
mp;hf_nfs_access_check, { "Check access", "nfs.access_check", -- 2.20.1 _______ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] [PATCH 09/16] NFS: Use macros instead of magic numbers in NFS4 dissect_rpc_secparms4()

2024-09-14 Thread Pali Rohár via Wireshark-dev
erver"); offset = dissect_nfsdata(tvb, offset, tree, hf_nfs_data); -- 2.20.1 ___ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] [PATCH 10/16] NFS: Do not show NFS4 Close deprecation warning for the expected State ID

2024-09-14 Thread Pali Rohár via Wireshark-dev
00\x00\x00\x00\x00", 16) != 0) + expert_add_info(pinfo, ti, &ei_nfs4_stateid_deprecated); offset += 16; break; -- 2.20.1 ___________ Wireshark-dev mailing list -- wireshark-dev@wire

[Wireshark-dev] [PATCH 4/8] SMB: Fix description of NT/SMB/Windows Server Security control bit in Security Descriptor

2024-09-14 Thread Pali Rohár via Wireshark-dev
sc_type_sacl_auto_inherit_req, { "SACL Auto Inherit Required", "nt.sec_desc.type.sacl_auto_inherit_req", FT_BOOLEAN, 16, -- 2.20.1 ___ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] [PATCH 8/8] SMB: Fix decoding SMB2 SESSION SETUP REQUEST field NTLM Calling workstation domain and name in UNICODE format

2024-09-14 Thread Pali Rohár via Wireshark-dev
IN(data_start, item_start); -- 2.20.1 ___________ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] [PATCH 05/16] NFS: Dissect NFS4 GSS OID

2024-09-14 Thread Pali Rohár via Wireshark-dev
NE, NULL, 0, NULL, HFILL }}, { &hf_nfs4_qop, { -- 2.20.1 ___________ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] [PATCH 6/8] SMB: Move non-generic NT/SMB/Windows access masks out of the generic subtree

2024-09-14 Thread Pali Rohár via Wireshark-dev
t_access_mask_specific, &ett_nt_security_information, -- 2.20.1 _______ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] [PATCH 01/16] NFS: Fix NFSv3 READDIRPLUS filename snooping

2024-09-14 Thread Pali Rohár via Wireshark-dev
offset = dissect_rpc_uint64(tvb, entry_tree, hf_nfs3_readdirplus_entry_cookie, - offset); - - offset = dissect_nfs3_post_op_attr(tvb, offset, pinfo, entry_tree, "name_attributes"); - offset = dissect_nfs3_post_op_fh(tvb, offset, pinfo, entry_tree, "name_handle", civ); /* now we know, that a readdirplus entry is shorter */ -- 2.20.1 ___ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] [PATCH 3/8] SMB: Dissect NT/SMB/Windows access mask constant 0x01000000 (SYSTEM_SECURITY_ACCESS)

2024-09-14 Thread Pali Rohár via Wireshark-dev
+ SYSTEM_SECURITY_ACCESS, NULL, HFILL }}, + { &hf_access_standard_read_control, { "Read control", "nt.access_mask.read_control", FT_BOOLEAN, 32, TFS(&tfs_set_notset), -- 2.20.1 _______

[Wireshark-dev] [PATCH 2/8] SMB: Remove NT/SMB/Windows access mask constant 0x00800000

2024-09-14 Thread Pali Rohár via Wireshark-dev
CL_ACCESS 0x0080 #define SYSTEM_SECURITY_ACCESS 0x0100 #define MAXIMUM_ALLOWED_ACCESS 0x02000000 -- 2.20.1 _______ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] [PATCH 1/8] SMB: Update description of SMB access mask bits

2024-09-14 Thread Pali Rohár via Wireshark-dev
R, GROUP and DACL access", + "No read OWNER, GROUP and DACL access" }; static const true_false_string tfs_nt_access_mask_delete = { "DELETE access", -- 2.20.1 ___ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] [PATCH 5/8] SMB: Fix description of NT/SMB/Windows Specific access mask constants

2024-09-14 Thread Pali Rohár via Wireshark-dev
ecific_1", FT_BOOLEAN, 32, TFS(&tfs_set_notset), 0x0002, NULL, HFILL }}, { &hf_access_specific_0, - { "Specific access, bit 0", "nt.access_mask.specific_0", + { "Read data file / List directory", "nt.access_mask.specific_0", FT_BOOLEAN, 32, TFS(&tfs_set_notset), 0x0001, NULL, HFILL }}, -- 2.20.1 ___ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] [PATCH 7/8] SMB: Dissect all NT/SMB/Windows access mask bits

2024-09-14 Thread Pali Rohár via Wireshark-dev
FT_BOOLEAN, 32, TFS(&tfs_set_notset), + 0x0020, NULL, HFILL }}, + { &hf_access_standard_read_control, { "Read control", "nt.access_mask.read_control", FT_BOOLEAN, 32, TFS(&tfs_set_notset), -- 2.20.1 ___ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] [PATCH 0/8] SMB: Improve dissector

2024-09-14 Thread Pali Rohár via Wireshark-dev
/dissectors/packet-windows-common.h | 1 - 4 files changed, 82 insertions(+), 30 deletions(-) -- 2.20.1 ___ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] A few minor comments on the latest 4.3.1 release notes

2024-08-02 Thread Maynard, Chris via Wireshark-dev
system. Any unauthorized reading, distribution, copying, or other use of this message or its attachments is strictly prohibited. ___________ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

[Wireshark-dev] Ubuntu Linux Interface Question

2024-07-31 Thread Pierson Brooks via Wireshark-dev
rence I running Version 4.2.5 on POP_OS 22.04. Thanks! -Piers_______ Wireshark-dev mailing list -- wireshark-dev@wireshark.org To unsubscribe send an email to wireshark-dev-le...@wireshark.org

Re: [Wireshark-dev] exported_pdu 3GPP Cell identity, question on PLMN encoding

2024-07-01 Thread Mauro Levra via Wireshark-dev
Thanks for your advice, Pascal. I have drafted a merge request for this at https://gitlab.com/wireshark/wireshark/-/merge_requests/16233 Regards, Mauro From: Pascal Quantin Sent: Friday, June 28, 2024 19:07 To: Mauro Levra Subject: Re: [Wireshark-dev

Re: [Wireshark-dev] exported_pdu 3GPP Cell identity, question on PLMN encoding

2024-06-28 Thread Mauro Levra via Wireshark-dev
d MNC as separate fields... Any idea? Mauro _______ Sent via:Wireshark-dev mailing list Archives: https://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe

Re: [Wireshark-dev] exported_pdu 3GPP Cell identity, question on PLMN encoding

2024-06-28 Thread Mauro Levra via Wireshark-dev
orry for the confusion, Pascal: too many errors in my first email! You are right, it is the standard BCD encoding from 3GPP. I will continue working on my merge request. Thanks, Mauro ___________ Sent via:Wireshark-dev mailing

Re: [Wireshark-dev] exported_pdu 3GPP Cell identity, question on PLMN encoding

2024-06-28 Thread Mauro Levra via Wireshark-dev
have PLMN: [0] 0x23, [1] 0x71, [2] 0x89 and PLMN: [0] 0x32, [1] 0xF1, [2] 0x89 which would be the traditional BCD encoding used in 3GPP specs. ___ Sent via:Wireshark-dev mailing list Archives:https://www.wireshark.org

[Wireshark-dev] exported_pdu 3GPP Cell identity, question on PLMN encoding

2024-06-28 Thread Mauro Levra via Wireshark-dev
] 0x21, [1] 0xF3, [2] 0x98 Regards, Mauro [3GPP TS 36.455] https://www.etsi.org/deliver/etsi_ts/136400_136499/136455/16.01.00_60/ts_136455v160100p.pdf ___ Sent via:Wireshark-dev mailing list Archives:https

Re: [Wireshark-dev] Add enterprise-specific options to Extended PDU protocol header

2024-06-20 Thread Mauro Levra via Wireshark-dev
ing TLV structures? Regards, Mauro _______ Sent via:Wireshark-dev mailing list Archives:https://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe

[Wireshark-dev] Add enterprise-specific options to Extended PDU protocol header

2024-06-20 Thread Mauro Levra via Wireshark-dev
1] <https://datatracker.ietf.org/doc/html/rfc7011>. [IANA-PEN] IANA, "Private Enterprise Numbers", <https://www.iana.org/assignments/enterprise-numbers/>. _______ Sent via:Wireshark-dev

Re: [Wireshark-dev] Patch submission via e-mail/mailing list

2024-06-04 Thread Bruno Mauricio via Wireshark-dev
shark/-/merge_requests/15850 Looks like there is work being done via the standard process? On Tue, Jun 4, 2024 at 8:28 AM Bruno Mauricio via Wireshark-dev wrote: Hello again, Just as I sent my previous e-mail, I got a confirmation from gitlab about false flagging my account, whic

Re: [Wireshark-dev] Patch submission via e-mail/mailing list

2024-06-04 Thread Bruno Mauricio via Wireshark-dev
Mauricio On 6/4/24 2:22 PM, Bruno Mauricio via Wireshark-dev wrote: Thank you very much for your reply, I have attached the patch for Zigbee NCP dissector update in wireshark. I also attached a pcap which contains the added packets. Running wireshark (without the patch) shows a bunch of "Un

Re: [Wireshark-dev] Patch submission via e-mail/mailing list

2024-06-04 Thread Bruno Mauricio via Wireshark-dev
o Mauricio via Wireshark-dev wrote: Hello, I created a Gitlab account just to send a patch for wireshark but it was banned a few minutes after I created the Merge Request. I tried creating a different account using gmail (and not this work e-mail, thought that might be the issue) but as soon

[Wireshark-dev] Patch submission via e-mail/mailing list

2024-06-04 Thread Bruno Mauricio via Wireshark-dev
___ Sent via:Wireshark-dev mailing list Archives:https://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe

[Wireshark-dev] Wiki editor permission

2024-05-23 Thread na.blue--- via Wireshark-dev
Hi, I would like permission to edit the Wireshark wiki. My GitLab username is .___ Sent via:Wireshark-dev mailing list Archives:https://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://www.wireshark.org

  1   2   3   4   5   6   >