Skip to content

Releases: SecureAuthCorp/SAP-Dissection-plug-in-for-Wireshark

SAP plug-in for wireshark v0.3.1

25 Mar 19:42
Compare
Choose a tag to compare
  • Switched to Wireshark 2.0 trunk. Ported the plugin to the use of new APIs.
  • src/packet-sapdiag.c: Added support bits found in SAP GUI versions 7.20 patch level 9 and 7.40.

SAP plug-in for wireshark v0.2.3

05 Nov 15:37
Compare
Choose a tag to compare
  • Minor documentation improvements.
  • Fixed some issues in Windows builds.
  • Added some basic unit test on dissecting SAP Router packets.
  • src/packet-saprouter.c: Better tracking of conversations. Now it's possible to trace request response packets and
    see the route information if the packet trace included that information. Thanks Luca!
  • src/vpa108csulzh.cpp: Improved the fix for CVE-2015-2278 by properly initializing arrays. Thanks ret5ret!

SAP plug-in for wireshark v0.2.2

26 Jun 15:01
Compare
Choose a tag to compare

SAP plug-in for wireshark v0.2.1

13 May 17:46
Compare
Choose a tag to compare
  • Switched to Wireshark 1.12 trunk. Ported the plugin to the use of new APIs (wmem, expert, etc.)
  • Fixed vulnerabilities in LZC and LZH compression libraries (CVE-2015-2282 and CVE-2015-2278).
    Added test cases for checking proper fixes.
  • Added basic packet parsing testing with travis, using pyshark. It allows to check that the plugin is built and
    loaded correctly.
  • Moved to a layout with all source in src folder.
  • Test building with clang on travis.
  • src/packet-saprouter.c: Added unknown field to router error messages.
  • src/packet-saprouter.c: Changed scope of hostname/password strings allocations.

SAP plug-in for wireshark v0.1.5

16 Jan 18:52
Compare
Choose a tag to compare
  • Added travis script for testing builds.
  • Fixed compilation on OSX. Thanks Valeriy !
  • General minor fixes and code improvements.
  • packet-sapdiag.c: Added dissection of error messages, fixed parsing of some atom items for old versions.
  • packet-sapdiag.c: Better highlighting of all invisible fields as potential passwords. Fixed parsing of GUI patch
    level item for old versions. Thanks Victor for the feedback!
  • packet-sapenqueue.c: Added dissection of admin trace requests.
  • packet-saprouter.c: Added dissection of error fields. Route strings field are now search-able.
  • sapdecompress.h: Improved routines and added handling of some error conditions.
  • saphelpers.h: Fixed use of helpers on different dissectors.

SAP plug-in for wireshark v0.1.4

28 Mar 12:56
Compare
Choose a tag to compare
  • Version released at Troopers'14.
  • Changelog now in GNU format.
  • Switched to Wireshark 1.10 trunk.
  • Moved to the use of the new memory allocation API (wmem) on all dissectors.
  • packet-sapdiag.c: Fixed some support bits and added new ones found on SAP GUI version 7.30.
  • packet-sapdiag.c: Added dissection of new Diag Items: WindowsSize.
  • packet-sapenqueue.c: New dissector. Parsing of Enqueue Server packets.
  • packet-sapms.c: New dissector. Parsing of Message Server packets.
  • packet-sapprotocol.c: Sub-dissectors tables are now handled only on the NI Protocol dissector.
  • packet-sapprotocol.h: Exported function to look at the NI Protocol sub-dissector table.
  • packet-saprfc.c: The RFC dissector now registers two separate handlers: one for internal calls (e.g. from SAP Diag
    dissector) and another for external communications (e.g. RFC or Gateway Monitor).
  • packet-saprfc.c: Refactored almost all of the dissector code. Added lot of new fields and fixed some issues.
  • packet-saprfc.c: Fixed reassemble of RFC tables.
  • packet-saprouter.c: Added dissection of Admin and Control messages.
  • packet-saprouter.c: Protocol port preference changed to a range to cover the port used by niping.
  • packet-sapsnc.c: New dissector. Moved dissection of SNC frames to a new dissector for using it as sub-dissector of
    both SAP Router and SAP Diag packets.
  • sapdecompress.h: Exported return code strings for using it in both Diag and RFC dissectors.
  • wireshark.patch: Switched patch file to Git as the repository isn't updated on SVN now.