[Wireshark-dev] SCCP equivalents in SUA dissector

2008-11-20 Thread Abhik Sarkar
Hi All,

Just as the M3UA dissector added a section called MTP3 equivalents
in packets which make it possible to use MTP3 fields for filtering,
would it be fair to have SCCP equivalents in the SUA dissector. I am
interested in particular in sccp.calling.digits and
sccp.called.digits... though there might be others which are also
useful.

Thanks,
Abhik.
___
Wireshark-dev mailing list
Wireshark-dev@wireshark.org
https://wireshark.org/mailman/listinfo/wireshark-dev


[Wireshark-dev] Plugin draw graphs

2008-11-20 Thread Laoduan
Hi,
 
I want to add a funtion in my plugin to draw a graph. But I do not know how to 
do it. I have no idea of how to use the gtk. Is there any example for me? 
 
Thank you
Denny


  ___ 
  好玩贺卡等你发,邮箱贺卡全新上线! 
http://card.mail.cn.yahoo.com/___
Wireshark-dev mailing list
Wireshark-dev@wireshark.org
https://wireshark.org/mailman/listinfo/wireshark-dev


Re: [Wireshark-dev] SCCP equivalents in SUA dissector

2008-11-20 Thread Luis EG Ontanon
.[ds]lr
.*ssn*
.*.gti.
*.[nr]i


On Thu, Nov 20, 2008 at 11:40 AM, Abhik Sarkar [EMAIL PROTECTED] wrote:
 Hi All,

 Just as the M3UA dissector added a section called MTP3 equivalents
 in packets which make it possible to use MTP3 fields for filtering,
 would it be fair to have SCCP equivalents in the SUA dissector. I am
 interested in particular in sccp.calling.digits and
 sccp.called.digits... though there might be others which are also
 useful.

 Thanks,
 Abhik.
 ___
 Wireshark-dev mailing list
 Wireshark-dev@wireshark.org
 https://wireshark.org/mailman/listinfo/wireshark-dev




-- 
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan
___
Wireshark-dev mailing list
Wireshark-dev@wireshark.org
https://wireshark.org/mailman/listinfo/wireshark-dev


[Wireshark-dev] Using wireshark with centOS 5 need to run lua scripts for dissector

2008-11-20 Thread Charles Carson
Please need help,

I want to write a dissector in Wireshark under CentOS using Lua, what are 
the steps to get this to work? Installed Wireshark via yum cannot run 
configure to enable lua pugin. Please provide detailed steps. 

Thanks,

Charles Carson
[EMAIL PROTECTED]
ARRIS 
678.473.8489


___
Wireshark-dev mailing list
Wireshark-dev@wireshark.org
https://wireshark.org/mailman/listinfo/wireshark-dev


[Wireshark-dev] LNK2001: unresolved external symbol _ett_nds

2008-11-20 Thread CHRIS AKERS
Hello,

I had earlier problems compiling so have refreshed my box with Visual
Studio 2008 Team Studio (inc SDK).

I've also completely refreshed the source from SVN (deleted local first).

verify_tools, setup and distclean all run with no problems but when I
run a 'make all' I'm now getting:

'Creating library libwireshark.lib and object libwireshark.exp
dissectors.lib(packet-ncp-sss.obj) : error LNK2001: unresolved
external symbol _ett_nds'


The 'err_nds' symbol used in packet-ncp-sss.c does not seem to be
defined anywhere apart from in a file called 'packet-ncp.c.save' which
appears in \wireshark\epan\dissectors each time I try to build.  It
looks like the build process is creating this file - the distclean
deletes them each time it's run - but I'm unsure how this works.

Again, I have tried the usual methods to search for an answer but
can't find anything - nothing in SVN log that suggests this has
changed recently.  Any pointers would be greatly appreciated.


* Visual Studio 2008 with Visual Studio 2008 SDK
* Windows XP Professional


Many Thanks,

Chris.
___
Wireshark-dev mailing list
Wireshark-dev@wireshark.org
https://wireshark.org/mailman/listinfo/wireshark-dev


Re: [Wireshark-dev] Using wireshark with centOS 5 need to run lua scripts for dissector

2008-11-20 Thread Jeff Morriss


Charles Carson wrote:
 
 Hi All,
 
 I want to write a dissector in Wireshark under CentOS using Lua, what 
 are the steps to get this to work? Installed Wireshark via yum cannot 
 run configure to enable lua pugin. Please provide detailed steps.

When you run wireshark -v does it say without Lua or with Lua?

If it says without Lua then the version provided by CentOS does not 
come with LUA built in so you'll need to build your own Wireshark (there 
are instructions on the web site and/or Wiki).
___
Wireshark-dev mailing list
Wireshark-dev@wireshark.org
https://wireshark.org/mailman/listinfo/wireshark-dev


[Wireshark-dev] VoIP call analysis

2008-11-20 Thread Michael Lum
Hi,

I'm looking at voip_calls.c and there is a voip_protocol_name array
that contains, among others, SCCP, BSSMAP and RANAP.

How does this work for a with the following partial stack:

BSSMAP or RANAP
SCCP
M3UA
...

?

I tried out one of my traces with SCCP and it sort of works.
Was it meant to be used with the above or for some other kind
of protocol layering ?
(I thought only A-interfaces used connection-oriented SCCP.)

I say it only sort of works because SCCP can't determine a
call state or even imply a call is taking place.

Should I just ignore the SCCP code eventhough IOS 5 is
carried on it ?

Thanks.

--
Michael Lum   Principal Software Engineer
4600 Jacombs Road +1.604.276.0055
Richmond, B.C.
Canada V6V 3B1
Star Solutions
___
Wireshark-dev mailing list
Wireshark-dev@wireshark.org
https://wireshark.org/mailman/listinfo/wireshark-dev


Re: [Wireshark-dev] VoIP call analysis

2008-11-20 Thread Luis EG Ontanon
if IOS5 uses the connection-less SCCP service SCCP-connection-tracking
cannot help you.

If it instead uses the Conection-Oriented SCCP service, you can take a
look at how RANAP and BSSAP put interesting information into the
SCCP data for the packet/connection.

(Beware that in order to trace calls SCCP needs the Keep Track of...
preference being enabled).

BR

Lego

On Thu, Nov 20, 2008 at 7:15 PM, Michael Lum
[EMAIL PROTECTED] wrote:
 Hi,

 I'm looking at voip_calls.c and there is a voip_protocol_name array
 that contains, among others, SCCP, BSSMAP and RANAP.

 How does this work for a with the following partial stack:

 BSSMAP or RANAP
 SCCP
 M3UA
 ...

 ?

 I tried out one of my traces with SCCP and it sort of works.
 Was it meant to be used with the above or for some other kind
 of protocol layering ?
 (I thought only A-interfaces used connection-oriented SCCP.)

 I say it only sort of works because SCCP can't determine a
 call state or even imply a call is taking place.

 Should I just ignore the SCCP code eventhough IOS 5 is
 carried on it ?

 Thanks.

 --
 Michael Lum   Principal Software Engineer
 4600 Jacombs Road +1.604.276.0055
 Richmond, B.C.
 Canada V6V 3B1
 Star Solutions
 ___
 Wireshark-dev mailing list
 Wireshark-dev@wireshark.org
 https://wireshark.org/mailman/listinfo/wireshark-dev




-- 
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan
___
Wireshark-dev mailing list
Wireshark-dev@wireshark.org
https://wireshark.org/mailman/listinfo/wireshark-dev