[Wireshark-dev] Benjamin M Stocks/NorthAmerica/RA/Rockwell is out of the office.

2006-09-22 Thread Benjamin M Stocks
I will be out of the office starting 09/22/2006 and will not return until 10/09/2006. I will be out of the office starting Friday September 22nd and returning Monday October 9th. If this is an urgent matter in regards to the Kinetix CIP project contact David van Dorpe, all other urgent matters

[Wireshark-dev] Benjamin M Stocks/NorthAmerica/RA/Rockwell is out of the office.

2006-09-22 Thread Benjamin M Stocks
I will be out of the office starting 09/22/2006 and will not return until 10/09/2006. I will be out of the office starting Friday September 22nd and returning Monday October 9th. If this is an urgent matter in regards to the Kinetix CIP project contact David van Dorpe, all other urgent matters

[Wireshark-dev] Benjamin M Stocks/NorthAmerica/RA/Rockwell is out of the office.

2006-09-22 Thread Benjamin M Stocks
I will be out of the office starting 09/22/2006 and will not return until 10/09/2006. I will be out of the office starting Friday September 22nd and returning Monday October 9th. If this is an urgent matter in regards to the Kinetix CIP project contact David van Dorpe, all other urgent matters

[Wireshark-dev] Benjamin M Stocks/NorthAmerica/RA/Rockwell is out of the office.

2006-09-22 Thread Benjamin M Stocks
I will be out of the office starting 09/22/2006 and will not return until 10/09/2006. I will be out of the office starting Friday September 22nd and returning Monday October 9th. If this is an urgent matter in regards to the Kinetix CIP project contact David van Dorpe, all other urgent matters

[Wireshark-dev] Benjamin M Stocks/NorthAmerica/RA/Rockwell is out of the office.

2006-09-22 Thread Benjamin M Stocks
I will be out of the office starting 09/22/2006 and will not return until 10/09/2006. I will be out of the office starting Friday September 22nd and returning Monday October 9th. If this is an urgent matter in regards to the Kinetix CIP project contact David van Dorpe, all other urgent matters

Re: [Wireshark-dev] Benjamin M Stocks/NorthAmerica/RA/Rockwell is out of the office.

2006-09-22 Thread Joerg Mayer
On Fri, Sep 22, 2006 at 04:21:36AM -0500, Benjamin M Stocks wrote: I will be out of the office starting 09/22/2006 and will not return until 10/09/2006. I will be out of the office starting Friday September 22nd and returning Monday October 9th. If this is an urgent matter in regards to the

[Wireshark-dev] Benjamin M Stocks/NorthAmerica/RA/Rockwell is out of the office.

2006-09-22 Thread Benjamin M Stocks
I will be out of the office starting 09/22/2006 and will not return until 10/09/2006. I will be out of the office starting Friday September 22nd and returning Monday October 9th. If this is an urgent matter in regards to the Kinetix CIP project contact David van Dorpe, all other urgent matters

[Wireshark-dev] Preventing the display of the payload data in the proto tree

2006-09-22 Thread Bill Fassler
Hey guys I got over the last hump. When I tried to add the payload item to the tree as a size of 80 things blew up, but when I call a routine to determine the number of bytes remaining (which is 80) things worked fine go figure. Anyway, here is what I used to get it working: payload_size =

[Wireshark-dev] Delays in real-time packet capture

2006-09-22 Thread Richard van der Hoff
Has anybody else noticed, that when capturing in realtime with a filter that means that packets aren't captured very often, the last couple of packets to be captured get 'stuck' until some more data comes along? Sorry for the terrible explanation. It might be easier if I point to the offending

Re: [Wireshark-dev] Delays in real-time packet capture

2006-09-22 Thread Guy Harris
Richard van der Hoff wrote: One workaround for this is to #define MUST_DO_SELECT, so that capture_loop_dispatch uses a select() to wait for packets to turn up, and put a second's timeout on the select() - but i'm not sure how portable this is likely to be. It's likely to be quite

Re: [Wireshark-dev] Proposal to move Copy on packet detail popup menu

2006-09-22 Thread Jaap Keuter
Hi, I've done it. :) Thanx, Jaap On Thu, 21 Sep 2006, Joerg Mayer wrote: On Thu, Sep 21, 2006 at 05:59:55PM +0200, Jaap Keuter wrote: Time and time again, I find myself looking for the Expand Subtrees item in the packet detail popup menu. It used to be the top most item, until Copy took

[Wireshark-dev] MAPI EcrRegisterPushNotification dissection

2006-09-22 Thread Stephen Fisher
I have figured out one of the fields in the MAPI EcRRegisterPushNotification packet. The field is a UDP port number that the client wants the Exchange server to send new mail notifications on. These notifications are on a port 1023 and are always 8 bytes long. It looks like I would add the

Re: [Wireshark-dev] Proposal to move Copy on packet detail popup menu

2006-09-22 Thread Jaap Keuter
Hi, Well, since the Copy was put on top someone wanted it within easy reach. Now that it's down the list, you've to specifically target it, like the apply as filter. So once it's bumped from the top it's not really relevant, from a navigation point of view, were it is, as long as it's grouped

Re: [Wireshark-dev] Proposal to move Copy on packet detail popup menu

2006-09-22 Thread Andrew Hood
Ulf Lamping wrote: Jaap Keuter wrote: Hi, I've done it. :) Hmmm, while looking at it - shouldn't the Copy item even be moved under the Follow SSL Stream block? I'm using the Apply As Filter frequently and the Copy never ... Are you suggesting we need a Windows-like personalised

Re: [Wireshark-dev] Preventing the display of the payload data in the proto tree

2006-09-22 Thread ronnie sahlberg
Try FT_NONE not BASE_NONE On 9/22/06, Bill Fassler [EMAIL PROTECTED] wrote: Hey guys I got over the last hump. When I tried to add the payload item to the tree as a size of 80 things blew up, but when I call a routine to determine the number of bytes remaining (which is 80) things worked

Re: [Wireshark-dev] Should we check value_strings for NULL termination while registering?

2006-09-22 Thread Ulf Lamping
ronnie sahlberg wrote: That would be an awful lot of work since we would need to modify (add registration of) all value_strings. I only thought of the registration of the hf_ arrays, so this would probably a single place to change. I think this would already catch the vast majority of

[Wireshark-dev] Patch for packet-vnc.c

2006-09-22 Thread Stephen Fisher
Attached is a short patch which modifies the VNC dissector to desegment the server cut text message type for cases where the cut text is in the next tcp segment from the first part of the message. Steve packet-vnc-desegment-server-cut-text.pcap Description: application/cap

Re: [Wireshark-dev] Is it possible to add the actual data (80 bytes) to the proto tree in a chunk?

2006-09-22 Thread Guy Harris
On Sep 21, 2006, at 3:50 PM, Bill Fassler wrote: Ya know how the first branch of the plugin tree highlights the entire packet, the header, data and everything? Well, my superiors (who is everybody in the world it seems) insist that I add a final branch that highlights the actual data