[Wireshark-bugs] [Bug 16517] Environment variables should be documented.

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16517 Christopher Maynard changed: What|Removed |Added Status|UNCONFIRMED |RESOLVED

[Wireshark-bugs] [Bug 16484] OUI lookup tool - flag requests with IG or LG bit set

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16484 --- Comment #2 from Chuck Craft --- It seems the wireless people are ok with how the ethers file works. But for people researching wireless devices outside Wireshark, the Wireshark OUI Lookup Tool is usually at top of a web search. This

[Wireshark-bugs] [Bug 16517] Environment variables should be documented.

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16517 Peter Wu changed: What|Removed |Added CC||pe...@lekensteyn.nl --- Comment #11

[Wireshark-bugs] [Bug 16515] RFE: filter variable "tcp.ack_rel"

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16515 --- Comment #2 from Gerrit Code Review --- Change 36994 had a related patch set uploaded by Peter Wu: TCP: Add expert info for SYN-ACK that accepts TFO data https://code.wireshark.org/review/36994 -- You are receiving this mail

[Wireshark-bugs] [Bug 16515] RFE: filter variable "tcp.ack_rel"

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16515 Peter Wu changed: What|Removed |Added Status|UNCONFIRMED |CONFIRMED CC|

[Wireshark-bugs] [Bug 16484] OUI lookup tool - flag requests with IG or LG bit set

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16484 Peter Wu changed: What|Removed |Added CC||pe...@lekensteyn.nl --- Comment #1

[Wireshark-bugs] [Bug 16541] New: Should protocol display filters work for all protocols in frame.protocols?

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16541 Bug ID: 16541 Summary: Should protocol display filters work for all protocols in frame.protocols? Product: Wireshark Version: 3.2.3 Hardware: All

[Wireshark-bugs] [Bug 16540] Kafka Protocol Analyzer Many Malformed Packets

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16540 --- Comment #2 from Razi Levin --- Created attachment 17743 --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=17743=edit pcap as requested -- You are receiving this mail because: You are watching all bug

[Wireshark-bugs] [Bug 16540] Kafka Protocol Analyzer Many Malformed Packets

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16540 Alexis La Goutte changed: What|Removed |Added Status|UNCONFIRMED |INCOMPLETE Ever

[Wireshark-bugs] [Bug 16533] packet-ieee80211.c: Add "Release 3" to the Hotspot 2.0 Release value string

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16533 --- Comment #3 from Matthew Weant --- Created attachment 17742 --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=17742=edit Small Hotspot 2.0 ANQP PCAP the two last frames include hotspot 2.0 data - look at subtree titles to

[Wireshark-bugs] [Bug 16534] packet-ieee80211.c: Hotspot 2.0 Friendly Name messages fail to correctly add items to Friendly Name Subtree

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16534 --- Comment #2 from Gerrit Code Review --- Change 36993 had a related patch set uploaded by Matthew Weant: IEEE802.11: HS2.0 ANQP Friendly Name Subtree Fix https://code.wireshark.org/review/36993 -- You are receiving this mail because:

[Wireshark-bugs] [Bug 16533] packet-ieee80211.c: Add "Release 3" to the Hotspot 2.0 Release value string

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16533 --- Comment #2 from Gerrit Code Review --- Change 36991 had a related patch set uploaded by Matthew Weant: IEEE802.11: Add HS2.0 Rel Num & Replace ANQP Info ID/Subtree Format https://code.wireshark.org/review/36991 -- You are receiving

[Wireshark-bugs] [Bug 16540] New: Kafka Protocol Analyzer Many Malformed Packets

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16540 Bug ID: 16540 Summary: Kafka Protocol Analyzer Many Malformed Packets Product: Wireshark Version: unspecified Hardware: x86 OS: Linux Status: UNCONFIRMED

[Wireshark-bugs] [Bug 16054] Add SSH decryption support

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16054 --- Comment #15 from Eugene Adell --- (In reply to Rasmus Jonsson from comment #13) > I (or rather, the students who were working on SSH decryption) had to change > the OpenSSH source code to allow the enabling of the NONE cipher. 3 lines

[Wireshark-bugs] [Bug 16322] SDP dissector does not parse sprop-parameter-sets field

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16322 --- Comment #7 from Gerrit Code Review --- Change 36989 had a related patch set uploaded by Sergey Bogdanov: RTSP/SDP: Fix parsing error for H264:sprop-parameter-sets https://code.wireshark.org/review/36989 -- You are receiving this

[Wireshark-bugs] [Bug 16520] Typographical errors in packet-ieee80211.c related to ANQP fields (all wireshark versions) may lead to filter failures

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16520 --- Comment #5 from Alexis La Goutte --- (In reply to Matthew Weant from comment #4) > Thanks for fixing - was working through all the bug submissions before > pushing any patches. Working on patching all those submissions now (aside >

[Wireshark-bugs] [Bug 16536] packet-ieee80211.c: 'dissect_hs20_anqp_wan_metrics()' doesn't check for remaining bytes and occasionally creates malformed packets as a result

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16536 Matthew Weant changed: What|Removed |Added Status|UNCONFIRMED |IN_PROGRESS Ever confirmed|0

[Wireshark-bugs] [Bug 16534] packet-ieee80211.c: Hotspot 2.0 Friendly Name messages fail to correctly add items to Friendly Name Subtree

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16534 Matthew Weant changed: What|Removed |Added Ever confirmed|0 |1 Status|UNCONFIRMED

[Wireshark-bugs] [Bug 16532] packet-ieee80211.c: Modify wlan.fixed.anqp.* fields and subtree presentation for conciseness & clarity

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16532 Matthew Weant changed: What|Removed |Added Ever confirmed|0 |1 Status|UNCONFIRMED

[Wireshark-bugs] [Bug 16533] packet-ieee80211.c: Add "Release 3" to the Hotspot 2.0 Release value string

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16533 Matthew Weant changed: What|Removed |Added Ever confirmed|0 |1 Status|UNCONFIRMED

[Wireshark-bugs] [Bug 16522] packet-eap.c: Conservative Peer, Anonymous User, Encrypted IMSI, and two other identity types do not dissect

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16522 Matthew Weant changed: What|Removed |Added Ever confirmed|0 |1 Status|UNCONFIRMED

[Wireshark-bugs] [Bug 16524] packet-eap.c: Some identity string values have periods so tokenization fails within dissect_eap_identity_wlan()

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16524 Matthew Weant changed: What|Removed |Added Status|UNCONFIRMED |IN_PROGRESS Ever confirmed|0

[Wireshark-bugs] [Bug 16528] packet-eap.c: Add "Certificate Serial Number" field for Encrypted IMSI identity strings

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16528 Matthew Weant changed: What|Removed |Added Ever confirmed|0 |1 Status|UNCONFIRMED

[Wireshark-bugs] [Bug 16521] packet-eap.c: Encrypted IMSI identities begin with a null byte prefix which fails string grab in dissect_eap_identity_wlan()

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16521 Matthew Weant changed: What|Removed |Added Status|CONFIRMED |IN_PROGRESS -- You are

[Wireshark-bugs] [Bug 16537] packet-eap.c: Replace several unique EAP identity fields with a single identity field, and add some metadata EAP Identity Fields

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16537 Matthew Weant changed: What|Removed |Added Ever confirmed|0 |1 Status|UNCONFIRMED

[Wireshark-bugs] [Bug 16530] packet-ieee80211.c: Add MCC, MNC, and resolved fields as they pertain to NAI realm and Domain Names

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16530 Matthew Weant changed: What|Removed |Added Ever confirmed|0 |1 Status|UNCONFIRMED

[Wireshark-bugs] [Bug 16539] packet-eap.c: Add EAP-SIM/AKA/AKA' Notification Message Type Values

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16539 Matthew Weant changed: What|Removed |Added Status|CONFIRMED |IN_PROGRESS -- You are

[Wireshark-bugs] [Bug 16538] Enhancement: Mobile Country/Network Code (MCC/MNC) Presentation Order

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16538 --- Comment #3 from Pascal Quantin --- (In reply to Matthew Weant from comment #2) > (In reply to Pascal Quantin from comment #1) > > Hi Matthew, > > > > could you clarify your request? As far as I know all the > >

[Wireshark-bugs] [Bug 16538] Enhancement: Mobile Country/Network Code (MCC/MNC) Presentation Order

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16538 --- Comment #2 from Matthew Weant --- (In reply to Pascal Quantin from comment #1) > Hi Matthew, > > could you clarify your request? As far as I know all the > dissect_e212_mcc_mnc_XXX() function put first the MCC then the MNC in the >

[Wireshark-bugs] [Bug 16520] Typographical errors in packet-ieee80211.c related to ANQP fields (all wireshark versions) may lead to filter failures

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16520 --- Comment #4 from Matthew Weant --- Thanks for fixing - was working through all the bug submissions before pushing any patches. Working on patching all those submissions now (aside from those already addressed like this one). -- You

[Wireshark-bugs] [Bug 16539] packet-eap.c: Add EAP-SIM/AKA/AKA' Notification Message Type Values

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16539 Richard Sharpe changed: What|Removed |Added Ever confirmed|0 |1

[Wireshark-bugs] [Bug 16539] New: packet-eap.c: Add EAP-SIM/AKA/AKA' Notification Message Type Values

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16539 Bug ID: 16539 Summary: packet-eap.c: Add EAP-SIM/AKA/AKA' Notification Message Type Values Product: Wireshark Version: 3.2.0 Hardware: x86-64 OS:

[Wireshark-bugs] [Bug 16526] MIME Files Format/pcapng: Simple Packet Block parsed incorrectly

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16526 --- Comment #3 from Gerrit Code Review --- Change 36988 had a related patch set uploaded by David Perry: MIME/pcapng: use snap length to get SPB data length https://code.wireshark.org/review/36988 -- You are receiving this mail

[Wireshark-bugs] [Bug 16538] Enhancement: Mobile Country/Network Code (MCC/MNC) Presentation Order

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16538 Pascal Quantin changed: What|Removed |Added Status|UNCONFIRMED |INCOMPLETE Ever confirmed|0

[Wireshark-bugs] [Bug 16527] Enhancement: Allow for dissector/protocol-specific fields for MCC/MNC values instead of global e212.mnc/mcc fields

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16527 Matthew Weant changed: What|Removed |Added See Also||https://bugs.wireshark.org/

[Wireshark-bugs] [Bug 16530] packet-ieee80211.c: Add MCC, MNC, and resolved fields as they pertain to NAI realm and Domain Names

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16530 Matthew Weant changed: What|Removed |Added See Also||https://bugs.wireshark.org/

[Wireshark-bugs] [Bug 16538] New: Enhancement: Mobile Country/Network Code (MCC/MNC) Presentation Order

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16538 Bug ID: 16538 Summary: Enhancement: Mobile Country/Network Code (MCC/MNC) Presentation Order Product: Wireshark Version: 3.2.0 Hardware: x86-64 OS:

[Wireshark-bugs] [Bug 16526] MIME Files Format/pcapng: Simple Packet Block parsed incorrectly

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16526 --- Comment #2 from Gerrit Code Review --- Change 36986 had a related patch set uploaded by David Perry: pcapng: expert info when packet appears without any interfaces https://code.wireshark.org/review/36986 -- You are receiving this

[Wireshark-bugs] [Bug 16537] packet-eap.c: Replace several unique EAP identity fields with a single identity field, and add some metadata EAP Identity Fields

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16537 --- Comment #1 from Matthew Weant --- Addition: The NAI Realm string would also be used to create a subtree to which the realm MNC, MNC, and resolved values would be added. This helps with cleanliness of information/presentation in the

[Wireshark-bugs] [Bug 16528] packet-eap.c: Add "Certificate Serial Number" field for Encrypted IMSI identity strings

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16528 Matthew Weant changed: What|Removed |Added See Also||https://bugs.wireshark.org/

[Wireshark-bugs] [Bug 16524] packet-eap.c: Some identity string values have periods so tokenization fails within dissect_eap_identity_wlan()

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16524 Matthew Weant changed: What|Removed |Added Blocks||16537 Referenced Bugs:

[Wireshark-bugs] [Bug 16537] packet-eap.c: Replace several unique EAP identity fields with a single identity field, and add some metadata EAP Identity Fields

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16537 Matthew Weant changed: What|Removed |Added Assignee|bugzilla-ad...@wireshark.or |mswe...@hotmail.com

[Wireshark-bugs] [Bug 16525] Enhancement: Allow for '\0' (NULL) character as filter instead of requiring 0x00 for the character match

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16525 Matthew Weant changed: What|Removed |Added See Also||https://bugs.wireshark.org/

[Wireshark-bugs] [Bug 16522] packet-eap.c: Conservative Peer, Anonymous User, Encrypted IMSI, and two other identity types do not dissect

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16522 Matthew Weant changed: What|Removed |Added Blocks||16537 Referenced Bugs:

[Wireshark-bugs] [Bug 16521] packet-eap.c: Encrypted IMSI identities begin with a null byte prefix which fails string grab in dissect_eap_identity_wlan()

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16521 Matthew Weant changed: What|Removed |Added Blocks||16537 Referenced Bugs:

[Wireshark-bugs] [Bug 16529] packet-eap.c: Unknown bytes between the end of EAP PDU and end-of-frame CRC

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16529 Matthew Weant changed: What|Removed |Added See Also||https://bugs.wireshark.org/

[Wireshark-bugs] [Bug 16537] New: packet-eap.c: Replace several unique EAP identity fields with a single identity field, and add some metadata EAP Identity Fields

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16537 Bug ID: 16537 Summary: packet-eap.c: Replace several unique EAP identity fields with a single identity field, and add some metadata EAP Identity Fields Product:

[Wireshark-bugs] [Bug 16423] Can't have duplicate personal and global profile names

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16423 --- Comment #3 from Gerrit Code Review --- Change 36902 merged by Roland Knall: Qt: Allow renaming personal profile https://code.wireshark.org/review/36902 -- You are receiving this mail because: You are watching all bug

[Wireshark-bugs] [Bug 16531] pcapng with multiple sections: packets from later sections use first section's interfaces

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16531 --- Comment #3 from Gerrit Code Review --- Change 36985 had a related patch set uploaded by Guy Harris: pcapng: have per-section interface tables rather than per-file. https://code.wireshark.org/review/36985 -- You are receiving this

[Wireshark-bugs] [Bug 16520] Typographical errors in packet-ieee80211.c related to ANQP fields (all wireshark versions) may lead to filter failures

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16520 Alexis La Goutte changed: What|Removed |Added Status|CONFIRMED |RESOLVED

[Wireshark-bugs] [Bug 16520] Typographical errors in packet-ieee80211.c related to ANQP fields (all wireshark versions) may lead to filter failures

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16520 --- Comment #3 from Gerrit Code Review --- Change 36982 merged by Anders Broman: ieee80211: fix typo naqp => anqp https://code.wireshark.org/review/36982 -- You are receiving this mail because: You are watching all bug

[Wireshark-bugs] [Bug 16520] Typographical errors in packet-ieee80211.c related to ANQP fields (all wireshark versions) may lead to filter failures

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16520 --- Comment #2 from Gerrit Code Review --- Change 36982 had a related patch set uploaded by Alexis La Goutte: ieee80211: fix typo naqp => anqp https://code.wireshark.org/review/36982 -- You are receiving this mail because: You are

[Wireshark-bugs] [Bug 16527] Enhancement: Allow for dissector/protocol-specific fields for MCC/MNC values instead of global e212.mnc/mcc fields

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16527 Jaap Keuter changed: What|Removed |Added Version|unspecified |Git -- You are receiving this

[Wireshark-bugs] [Bug 16520] Typographical errors in packet-ieee80211.c related to ANQP fields (all wireshark versions) may lead to filter failures

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16520 Alexis La Goutte changed: What|Removed |Added CC||alexis.lagou...@gmail.com ---

[Wireshark-bugs] [Bug 16526] MIME Files Format/pcapng: Simple Packet Block parsed incorrectly

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16526 Jaap Keuter changed: What|Removed |Added Status|UNCONFIRMED |IN_PROGRESS Ever confirmed|0

[Wireshark-bugs] [Bug 15707] Wireshark fails on piped/streamed pcapng packet capture data with mixed BE/LE SHBs, but reads mixed BE/LE files correctly

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707 --- Comment #16 from Gerrit Code Review --- Change 36981 had a related patch set uploaded by Guy Harris: Support reading mixed-byte-order pcapng files. https://code.wireshark.org/review/36981 -- You are receiving this mail because: You

[Wireshark-bugs] [Bug 16528] packet-eap.c: Add "Certificate Serial Number" field for Encrypted IMSI identity strings

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16528 Jaap Keuter changed: What|Removed |Added Version|unspecified |3.2.0 -- You are receiving this

[Wireshark-bugs] [Bug 16524] packet-eap.c: Some identity string values have periods so tokenization fails within dissect_eap_identity_wlan()

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16524 Jaap Keuter changed: What|Removed |Added Version|unspecified |3.2.0 -- You are receiving this

[Wireshark-bugs] [Bug 16522] packet-eap.c: Conservative Peer, Anonymous User, Encrypted IMSI, and two other identity types do not dissect

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16522 Jaap Keuter changed: What|Removed |Added Version|unspecified |3.2.0 -- You are receiving this

[Wireshark-bugs] [Bug 16521] packet-eap.c: Encrypted IMSI identities begin with a null byte prefix which fails string grab in dissect_eap_identity_wlan()

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16521 Jaap Keuter changed: What|Removed |Added Version|unspecified |3.2.0 -- You are receiving this

[Wireshark-bugs] [Bug 16519] capinfos "Capture duration" output is truncated if there are more than 11 digits of seconds and fractions of a second

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16519 --- Comment #15 from Guy Harris --- (In reply to Thomas Baudelet from comment #14) > Could such fixed arrays and truncation be present in other parts of > Wireshark codes ? > > For plural, time representation or any other strings ? Yes