From 99f37f13d671eed4269f28bc16a0f37a96d1ee7b Mon Sep 17 00:00:00 2001 From: joelazar Date: Wed, 8 Jul 2026 11:24:40 +0200 Subject: [PATCH] :wrench: update wireshark to 4.6.6 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Update decode_as_entries version marker (4.6.2 → 4.6.6) - Add column 28 to gui.column.hide list - Add gsm_a.gm.sm.apn field to gui.column.hidden - Extend MCC/MNC column formats with fallback e212 fields - Update remote capture filters (ciscodump and sshdump) --- dot_config/wireshark/decode_as_entries | 2 +- dot_config/wireshark/preferences | 12 ++++++------ 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/dot_config/wireshark/decode_as_entries b/dot_config/wireshark/decode_as_entries index 9218ff48..61e39611 100644 --- a/dot_config/wireshark/decode_as_entries +++ b/dot_config/wireshark/decode_as_entries @@ -1,4 +1,4 @@ -# "Decode As" entries file for Wireshark 4.6.2. +# "Decode As" entries file for Wireshark 4.6.6. # # This file is regenerated each time "Decode As" preferences # are saved within Wireshark. Making manual changes should be safe, diff --git a/dot_config/wireshark/preferences b/dot_config/wireshark/preferences index f628a3a2..284c4eb1 100644 --- a/dot_config/wireshark/preferences +++ b/dot_config/wireshark/preferences @@ -304,11 +304,11 @@ gui.color_filter_bg.deprecated: e0af68 # Packet list hidden columns # List all column indices (1-indexed) to hide in the packet list. -gui.column.hide: 7,8,10,11,12,13,14,15,16,17,20,21,22,23,24,25,26,27,30 +gui.column.hide: 7,8,10,11,12,13,14,15,16,17,20,21,22,23,24,25,26,27,28,30 # Packet list hidden column formats (deprecated) # List all column formats to hide in the packet list. Deprecated in favor of the index-based preference. -gui.column.hidden: %D,%p,%Cus:e164.country_code:2:R,%Cus:gtpv2.teid:0:U,%Cus:text:0:U,%Cus:gtpv2.tai_tac:0:U,%Cus:gtpv2.enodebid:0:U,%Cus:gtpv2.cellid:0:U,%Cus:gtpv2.f_teid_gre_key:0:U,%Cus:tcp.dstport:0:U,%Cus:nas-eps.nas_msg_esm_type:0:R,%Cus:lte-rrc.releaseCause:0:R,%Cus:gsm_sms.tp-dcs:0:U,%Cus:gsm_sms.dcs.character_set:0:R,%Cus:sccp.calling.ssn:0:R,%Cus:gtpv2.cause || gtp.cause:0:U,%Cus:gtpv2.ambr_up || diameter.Max-Requested-Bandwidth-UL || gtp.qos_max_ul || gsm_map.qos.max_brate_ulink:0:U,%Cus:sctp.retransmission:0:U,%Cus:gsm_old.localValue:0:U +gui.column.hidden: %D,%p,%Cus:e164.country_code:2:R,%Cus:gtpv2.teid:0:U,%Cus:text:0:U,%Cus:gtpv2.tai_tac:0:U,%Cus:gtpv2.enodebid:0:U,%Cus:gtpv2.cellid:0:U,%Cus:gtpv2.f_teid_gre_key:0:U,%Cus:tcp.dstport:0:U,%Cus:nas-eps.nas_msg_esm_type:0:R,%Cus:lte-rrc.releaseCause:0:R,%Cus:gsm_sms.tp-dcs:0:U,%Cus:gsm_sms.dcs.character_set:0:R,%Cus:sccp.calling.ssn:0:R,%Cus:gtpv2.cause || gtp.cause:0:U,%Cus:gtpv2.ambr_up || diameter.Max-Requested-Bandwidth-UL || gtp.qos_max_ul || gsm_map.qos.max_brate_ulink:0:U,%Cus:sctp.retransmission:0:U,%Cus:gsm_a.gm.sm.apn:0:U,%Cus:gsm_old.localValue:0:U # Packet list column format # Each pair of strings consists of a column title and its format @@ -330,8 +330,8 @@ gui.column.format: "CellId", "%Cus:gtpv2.cellid:0:U", "TEID/GRE Key", "%Cus:gtpv2.f_teid_gre_key:0:U", "Destination Port", "%Cus:tcp.dstport:0:U", - "MCC", "%Cus:e212.cgi.mcc || e212.rai.mcc || e212.ecgi.mcc || e212.tai.mcc:0:U", - "MNC", "%Cus:e212.cgi.mnc || e212.rai.mnc || e212.ecgi.mnc || e212.tai.mnc:0:U", + "MCC", "%Cus:e212.cgi.mcc || e212.rai.mcc || e212.ecgi.mcc || e212.tai.mcc || e212.mcc:0:U", + "MNC", "%Cus:e212.cgi.mnc || e212.rai.mnc || e212.ecgi.mnc || e212.tai.mnc || e212.mnc:0:U", "NAS EPS session management messages", "%Cus:nas-eps.nas_msg_esm_type:0:R", "Release cause", "%Cus:lte-rrc.releaseCause:0:R", "Character Set", "%Cus:gsm_sms.tp-dcs:0:U", @@ -630,7 +630,7 @@ capture.devices_pmode: ap1(1),en0(1),awdl0(1),utun0(1),utun1(1),utun2(1),utun3(1 # Remote capture filter # A string -#extcap.ciscodump.remotefilter: deny tcp host 10.2.0.2 any eq 22, deny tcp any eq 22 host 10.2.0.2, deny tcp host fe80::70eb:a04b:a3b1:ba7f any eq 22, deny tcp any eq 22 host fe80::70eb:a04b:a3b1:ba7f, deny tcp host fe80::ef86:1e53:3857:6473 any eq 22, deny tcp any eq 22 host fe80::ef86:1e53:3857:6473, deny tcp host fd7a:115c:a1e0::c01:8c04 any eq 22, deny tcp any eq 22 host fd7a:115c:a1e0::c01:8c04, deny tcp host 100.115.140.4 any eq 22, deny tcp any eq 22 host 100.115.140.4, deny tcp host fe80::5859:cc7b:b4dc:a9ed any eq 22, deny tcp any eq 22 host fe80::5859:cc7b:b4dc:a9ed, deny tcp host fdba:61f6:fb94:76e1:1475:8e2a:59d4:3541 any eq 22, deny tcp any eq 22 host fdba:61f6:fb94:76e1:1475:8e2a:59d4:3541, deny tcp host fe80::842f:57ff:fea2:fe64 any eq 22, deny tcp any eq 22 host fe80::842f:57ff:fea2:fe64, deny tcp host 192.168.64.1 any eq 22, deny tcp any eq 22 host 192.168.64.1, deny tcp host fe80::7d0c:be52:c296:c095 any eq 22, deny tcp any eq 22 host fe80::7d0c:be52:c296:c095, deny tcp host fe80::96c2:688c:baa9:7ee4 any eq 22, deny tcp any eq 22 host fe80::96c2:688c:baa9:7ee4, deny tcp host fe80::ce81:b1c:bd2c:69e any eq 22, deny tcp any eq 22 host fe80::ce81:b1c:bd2c:69e, deny tcp host fe80::3a13:1ed4:6759:dba7 any eq 22, deny tcp any eq 22 host fe80::3a13:1ed4:6759:dba7, deny tcp host fe80::80c4:ff:fead:25ec any eq 22, deny tcp any eq 22 host fe80::80c4:ff:fead:25ec, deny tcp host fe80::80c4:ff:fead:25ec any eq 22, deny tcp any eq 22 host fe80::80c4:ff:fead:25ec, deny tcp host fe80::6ac6:4682:610c:8ce4 any eq 22, deny tcp any eq 22 host fe80::6ac6:4682:610c:8ce4, deny tcp host fe80::4b4c:f8d:a993:e5be any eq 22, deny tcp any eq 22 host fe80::4b4c:f8d:a993:e5be, deny tcp host fd93:55a4:39d:4b8c:43e:64cf:f723:73c6 any eq 22, deny tcp any eq 22 host fd93:55a4:39d:4b8c:43e:64cf:f723:73c6, deny tcp host 192.168.0.138 any eq 22, deny tcp any eq 22 host 192.168.0.138, deny tcp host fe80::889:db40:8f24:9f5f any eq 22, deny tcp any eq 22 host fe80::889:db40:8f24:9f5f, deny tcp host fe80::1 any eq 22, deny tcp any eq 22 host fe80::1, permit ip any any +#extcap.ciscodump.remotefilter: deny tcp host 10.2.0.2 any eq 22, deny tcp any eq 22 host 10.2.0.2, deny tcp host fd7a:115c:a1e0::c01:8c04 any eq 22, deny tcp any eq 22 host fd7a:115c:a1e0::c01:8c04, deny tcp host 100.115.140.4 any eq 22, deny tcp any eq 22 host 100.115.140.4, deny tcp host fe80::5859:cc7b:b4dc:a9ed any eq 22, deny tcp any eq 22 host fe80::5859:cc7b:b4dc:a9ed, deny tcp host fe80::16c8:3415:fe1e:3b0e any eq 22, deny tcp any eq 22 host fe80::16c8:3415:fe1e:3b0e, deny tcp host fe80::cb78:e994:7a5b:5642 any eq 22, deny tcp any eq 22 host fe80::cb78:e994:7a5b:5642, deny tcp host fe80::ce81:b1c:bd2c:69e any eq 22, deny tcp any eq 22 host fe80::ce81:b1c:bd2c:69e, deny tcp host fe80::ce0b:dc60:1d9f:38c0 any eq 22, deny tcp any eq 22 host fe80::ce0b:dc60:1d9f:38c0, deny tcp host fe80::902a:89:2d49:a33a any eq 22, deny tcp any eq 22 host fe80::902a:89:2d49:a33a, deny tcp host fe80::f91a:6177:5136:1dca any eq 22, deny tcp any eq 22 host fe80::f91a:6177:5136:1dca, deny tcp host fe80::cc23:86ff:fe26:30a7 any eq 22, deny tcp any eq 22 host fe80::cc23:86ff:fe26:30a7, deny tcp host fe80::cc23:86ff:fe26:30a7 any eq 22, deny tcp any eq 22 host fe80::cc23:86ff:fe26:30a7, deny tcp host 2a02:ab88:11:ab80:850a:684b:f550:d3a8 any eq 22, deny tcp any eq 22 host 2a02:ab88:11:ab80:850a:684b:f550:d3a8, deny tcp host 2a02:ab88:11:ab80:8fa:dbb3:5fff:6020 any eq 22, deny tcp any eq 22 host 2a02:ab88:11:ab80:8fa:dbb3:5fff:6020, deny tcp host 192.168.0.17 any eq 22, deny tcp any eq 22 host 192.168.0.17, deny tcp host fe80::1867:cceb:729d:be90 any eq 22, deny tcp any eq 22 host fe80::1867:cceb:729d:be90, deny tcp host fe80::1 any eq 22, deny tcp any eq 22 host fe80::1, permit ip any any # Packets to capture # A string @@ -718,7 +718,7 @@ capture.devices_pmode: ap1(1),en0(1),awdl0(1),utun0(1),utun1(1),utun2(1),utun3(1 # Remote capture filter # A string -#extcap.sshdump.remotefilter: not ((host 10.2.0.2 or host fe80::70eb:a04b:a3b1:ba7f or host fe80::ef86:1e53:3857:6473 or host fd7a:115c:a1e0::c01:8c04 or host 100.115.140.4 or host fe80::5859:cc7b:b4dc:a9ed or host fdba:61f6:fb94:76e1:1475:8e2a:59d4:3541 or host fe80::842f:57ff:fea2:fe64 or host 192.168.64.1 or host fe80::7d0c:be52:c296:c095 or host fe80::96c2:688c:baa9:7ee4 or host fe80::ce81:b1c:bd2c:69e or host fe80::3a13:1ed4:6759:dba7 or host fe80::80c4:ff:fead:25ec or host fe80::80c4:ff:fead:25ec or host fe80::6ac6:4682:610c:8ce4 or host fe80::4b4c:f8d:a993:e5be or host fd93:55a4:39d:4b8c:43e:64cf:f723:73c6 or host 192.168.0.138 or host fe80::889:db40:8f24:9f5f or host fe80::1) and port 22) +#extcap.sshdump.remotefilter: not ((host 10.2.0.2 or host fd7a:115c:a1e0::c01:8c04 or host 100.115.140.4 or host fe80::5859:cc7b:b4dc:a9ed or host fe80::16c8:3415:fe1e:3b0e or host fe80::cb78:e994:7a5b:5642 or host fe80::ce81:b1c:bd2c:69e or host fe80::ce0b:dc60:1d9f:38c0 or host fe80::902a:89:2d49:a33a or host fe80::f91a:6177:5136:1dca or host fe80::cc23:86ff:fe26:30a7 or host fe80::cc23:86ff:fe26:30a7 or host 2a02:ab88:11:ab80:850a:684b:f550:d3a8 or host 2a02:ab88:11:ab80:8fa:dbb3:5fff:6020 or host 192.168.0.17 or host fe80::1867:cceb:729d:be90 or host fe80::1) and port 22) # Packets to capture # A string -- 2.51.2