[Wireshark-dev] [PATCH] Avaya Display when codeset = 6

2006-12-19 Thread Alfred Alinazar
Hi All, Please find a little patch against revision 20149 to epan/dissectors/packet-q931.c The patch is to dissect unknown information element when an Avaya PBX use codeset = 6 to send display. The sample of avaya capture can also be found attached. Would you like to consider it please ? Thanks

Re: [Wireshark-dev] Porting Wireshark to Mac OS X

2006-12-19 Thread Romain Goyet
Allright guys, First of all, thank you for all those informations ! Let me answer to a few things : - Last time I tried (i.e. sometimes around August IIRC), building GTK+ on the then latest Tiger (10.4.7 IIRC) wasn't easy at all. Maybe because I wanted to build it with all the dependencies. But

Re: [Wireshark-dev] Microsoft Visual C Version 6 support is a bitoutdated ...

2006-12-19 Thread Ulf Lamping
Gerald Combs wrote: > Ulf Lamping wrote: > >> The biggest hurdle seems to be the different msvcrt.dll (C runtime >> library) versions for the libs we use, as Gerald already mentioned - I'm >> still thinking about the possibilities to solve this. >> > > If we need to we can split the packa

Re: [Wireshark-dev] Porting Wireshark to Mac OS X

2006-12-19 Thread Stephen Fisher
On Tue, Dec 19, 2006 at 11:28:48PM +0100, Romain Goyet wrote: > -> Build GTK+ and its dependencies, and then run Wireshark under > Apple's X11. That works just fine, but it's a pain in the *** to > build. It takes forever, you have to keep tweaking makefiles, etc... > For the average hacker, it

Re: [Wireshark-dev] Microsoft Visual C Version 6 support is a bitoutdated ...

2006-12-19 Thread Gerald Combs
Ulf Lamping wrote: > The biggest hurdle seems to be the different msvcrt.dll (C runtime > library) versions for the libs we use, as Gerald already mentioned - I'm > still thinking about the possibilities to solve this. If we need to we can split the packages subdirectory in wireshark-win32-libs

Re: [Wireshark-dev] Porting Wireshark to Mac OS X

2006-12-19 Thread Guy Harris
On Dec 19, 2006, at 2:28 PM, Romain Goyet wrote: > Hi there, > > So, I've seen that some people before me offered to port Wireshark > to Mac OS X, but eventually didn't :-). So, don't get me wrong, I know > WireShark already runs really well on Apple's OS, but it doesn't > natively. Here are th

[Wireshark-dev] Porting Wireshark to Mac OS X

2006-12-19 Thread Romain Goyet
Hi there, So, I've seen that some people before me offered to port Wireshark to Mac OS X, but eventually didn't :-). So, don't get me wrong, I know WireShark already runs really well on Apple's OS, but it doesn't natively. Here are the options I already gave a try : -> Build GTK+ and its depend

Re: [Wireshark-dev] [PATCH][Update] New dissector : Roofnet

2006-12-19 Thread Jaap Keuter
Hi, Checked in revision 20154. Thanx, Jaap On Tue, 19 Dec 2006, Sebastien Tandel wrote: > > Update of the patch for the roofnet dissector. It takes into account the > comments of Jaap. > > > Sebastien Tandel > ___ Wireshark-dev mailing list Wireshark

Re: [Wireshark-dev] Update Camel ASN1 definition to 3GPP TS 29.0787.3.0 Release 7

2006-12-19 Thread Anders Broman
Checked in. -Ursprungligt meddelande- Från: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] För [EMAIL PROTECTED] Skickat: den 19 december 2006 11:38 Till: wireshark-dev@wireshark.org Ämne: [Wireshark-dev] Update Camel ASN1 definition to 3GPP TS 29.0787.3.0 Release 7 >In fact, I am not sure t

Re: [Wireshark-dev] Add Expert info in BER dissector

2006-12-19 Thread Anders Broman
Checked in with changes to make it compile with MSVC6. BR Anders -Ursprungligt meddelande- Från: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] För [EMAIL PROTECTED] Skickat: den 19 december 2006 16:35 Till: wireshark-dev@wireshark.org Ämne: [Wireshark-dev] Add Expert info in BER dissector

[Wireshark-dev] [PATCH][Update] New dissector : Roofnet

2006-12-19 Thread Sebastien Tandel
Update of the patch for the roofnet dissector. It takes into account the comments of Jaap. Sebastien Tandel Index: epan/dissectors/Makefile.common === --- epan/dissectors/Makefile.common (révision 20151) +++ epan/dissectors/Make

Re: [Wireshark-dev] [PATCH] New Dissector : Roofnet

2006-12-19 Thread Jaap Keuter
Hi, Sounds good, lets have it. Thanx, Jaap On Tue, 19 Dec 2006, Sebastien Tandel wrote: > > >>> * The loop in dissect_roofnet should check that it doesn't spin out of > >>> control when an incorrectly large value is read. > >>> > >>> > >> The roofnet length is restricted to 400 bytes (maybe 200

Re: [Wireshark-dev] [PATCH] New Dissector : Roofnet

2006-12-19 Thread Sebastien Tandel
it does ... + /* dissect on remaining_datalen */ + if (roofnet_datalen < remaining_datalen) + proto_tree_add_text(tree, tvb, offset, roofnet_datalen, +"[More payload data (%d) than told by Roofnet (%d)]", +remaining_datalen, roofnet_datalen); + + if (roofnet_datalen == 0

Re: [Wireshark-dev] improvement to "Save as ..."

2006-12-19 Thread Stephen Fisher
On Wed, Dec 13, 2006 at 10:16:03PM +0100, Toralf F?rster wrote: > I sniffed ~ 45000 packets and got 56 MB in a tmp file. I stopped > wireshark and made a "Save as ...". After specifying a file name I saw > a popup window like "Loading ..." for some time before the operation > (it's only a renam

Re: [Wireshark-dev] Microsoft Visual C Version 6 support is a bitoutdated ...

2006-12-19 Thread Ulf Lamping
Kukosa, Tomas wrote: > Hi! > > I hope support of MSVC 6 will remain ;-) > I don't tend to break it - as I will also use it from time to time ;-) > Will we have common makefile for both versions or one for each of them? > My goal is to have a single compiler setting in config.nmake and using

Re: [Wireshark-dev] [PATCH] New Dissector : Roofnet

2006-12-19 Thread Nicola Arnoldi
Dear Sebastien, still the dissector does not decode the inner IPv4 datagram inside roofnet packet. Can you provide the dissector with this feature? Thanks Il giorno mar, 19/12/2006 alle 16.31 +0100, Sebastien Tandel ha scritto: > Hi all, > > >Here is a patch (against svn rev 20149) for the

Re: [Wireshark-dev] wireshark didn't compile for Win32

2006-12-19 Thread Jaap Keuter
Hi, Did you build the distclean beforehand? It's described in the developer manual in detail. Thanx, Jaap On Tue, 19 Dec 2006, Denis Kondratenko wrote: > Log from console: > > nmake -f Makefile.nmake all > ... > ... > Microsoft (R) Program Maintenance Utility Version 6.00.8168.0 > Copyright (

Re: [Wireshark-dev] Microsoft Visual C Version 6 support is a bit outdated ...

2006-12-19 Thread Ulf Lamping
Joerg Mayer wrote: > As an alternative: I hope to find some time after Christmas to "sort of > complete" the cmake stuff (for Unixish OSes). How about trying to expand > this to work with Win as well? cmake has a few windows backends. > > Well, instead of using a currently experimental cmake sup

[Wireshark-dev] wireshark didn't compile for Win32

2006-12-19 Thread Denis Kondratenko
Log from console: nmake -f Makefile.nmake all ... ... Microsoft (R) Program Maintenance Utility Version 6.00.8168.0 Copyright (C) Microsoft Corp 1988-1998. All rights reserved. 'codecs.lib' is up-to-date cd .. cd wiretap NMAKE / -f Makefile.nmake Micro

Re: [Wireshark-dev] [PATCH] New Dissector : Roofnet

2006-12-19 Thread Sebastien Tandel
>>> * The loop in dissect_roofnet should check that it doesn't spin out of >>> control when an incorrectly large value is read. >>> >>> >> The roofnet length is restricted to 400 bytes (maybe 200 in a near >> future). I then control whetherr the length of the announced number of >> links is

Re: [Wireshark-dev] tvbuff problem

2006-12-19 Thread Stephen Fisher
On Tue, Dec 19, 2006 at 12:23:29AM -0800, Paul Forgey wrote: > I have a tvbuff that is a composite made from a single subset. If I > try to add a tree item pointing to a non-0 offset into this buffer, I > get an exception. I can see the following behavior in the debugger. > Why is this happeni

Re: [Wireshark-dev] [PATCH] New Dissector : Roofnet

2006-12-19 Thread Jaap Keuter
Hi, Sebastien, On Tue, 19 Dec 2006, Sebastien Tandel wrote: > Hi Jaap, > > > > * I'm not sure about using get_hostname here. Shouldn't that be handled > > through Wireshark services. > > > What do you mean? get_hostname is already part of the wireshark API > (addr_resolv) and is used in many diss

Re: [Wireshark-dev] [PATCH] New Dissector : Roofnet

2006-12-19 Thread Sebastien Tandel
Hi Jaap, > * I'm not sure about using get_hostname here. Shouldn't that be handled > through Wireshark services. > What do you mean? get_hostname is already part of the wireshark API (addr_resolv) and is used in many dissectors. Should I use another function? > * The loop in dissect_roofnet s

Re: [Wireshark-dev] [PATCH] New Dissector : Roofnet

2006-12-19 Thread Jaap Keuter
Hi, Looks good. Some remarks though. * I'm not sure about using get_hostname here. Shouldn't that be handled through Wireshark services. * The loop in dissect_roofnet should check that it doesn't spin out of control when an incorrectly large value is read. * Use %u i.s.o. %d when printing unsigned

[Wireshark-dev] Update Camel ASN1 definition to 3GPP TS 29.078 7.3.0 Release 7

2006-12-19 Thread Florent . Drouin
Hello, Here is a patch to update the Camel ASN1 definition to version 3GPP TS 29.078 7.3.0 Release 7. Some definitions for element SIZE have been replaced to use the capSpecificBound variables, and some decoding problemes, like for Establish temporary connection have been solved. I did noti

[Wireshark-dev] tvbuff problem

2006-12-19 Thread Paul Forgey
I have a tvbuff that is a composite made from a single subset. If I try to add a tree item pointing to a non-0 offset into this buffer, I get an exception. I can see the following behavior in the debugger. Why is this happening? How should I dissect fields within this buffer if I can't do i

[Wireshark-dev] Add Expert info in BER dissector

2006-12-19 Thread Florent . Drouin
Hello, I did introduce the support for "expert info" in the BER decoding module. It is usefull if you have to analyze long capture files, containing few malformed messages. (See attached file: packet-ber.c.diff.gz) Best regards Florent packet-ber.c.diff.gz Description: Binary data _

[Wireshark-dev] [PATCH] New Dissector : Roofnet

2006-12-19 Thread Sebastien Tandel
Hi all, Here is a patch (against svn rev 20149) for the dissector of the new Roofnet protocol. Regards, Sebastien Tandel Index: epan/dissectors/Makefile.common === --- epan/dissectors/Makefile.common (révision 20149) +++ ep

Re: [Wireshark-dev] Microsoft Visual C Version 6 support is a bit outdated ...

2006-12-19 Thread Joerg Mayer
On Tue, Dec 19, 2006 at 02:23:46AM +0100, Ulf Lamping wrote: > We currently only "support" MSVC Version 6 for the Windows builds. > > As Version 6 is pretty much outdated and it's possible that I won't have > access to such an installation in the near future, it seems to become > time to make WS

Re: [Wireshark-dev] Microsoft Visual C Version 6 support is a bit outdated ...

2006-12-19 Thread Brian Vandenberg
Well, I'm excited about it. The debugger for VS8 is *much* more intelligent. Not to mention, with support for >VS7 it'd be [possible/easier] to write .net apps that interact with wireshark, plugins that take advantage of the .net framework, and possibly other ideas I haven't yet thought of.

Re: [Wireshark-dev] Capture Filter tns.data_flag.rts

2006-12-19 Thread Gilbert Ramirez
There's a distinction between capture filters and display filters. They use different syntaxes. See: http://www.wireshark.org/faq.html#q7.7 You *can* use display filters with tethereal, but be warned that display filters are slower than capture filters. Use "-R" instead of "-f" --gilbert On 12/

[Wireshark-dev] Capture Filter tns.data_flag.rts

2006-12-19 Thread david lopez
Hello I'm trying to use this filter 'tns.data_flag.rts' to capture only RTS/CTS packets I'm typing this in my shell: tethereal -i ath0 -c 500 -f tns.data_flag.rts An d I'm grtting the next error messege: Unable to parse the capture filter string (syntax error). Interestingly enough, this lools

Re: [Wireshark-dev] Roofnet Dissector

2006-12-19 Thread Nicola Arnoldi
Hi guys! A little errata as regards Roofnet datagrams. The Roofnet payload is a standard IPv4 packet. Il giorno lun, 18/12/2006 alle 00.31 +0100, Sebastien Tandel ha scritto: > Hi, > >happy to see that my work fit your needs ... but I was myself a > little bit busy these last days (and out

Re: [Wireshark-dev] Microsoft Visual C Version 6 support is a bit outdated ...

2006-12-19 Thread Ulf Lamping
Gerald Combs wrote: > Ulf Lamping wrote: > >> Do you mean legal issues, or something else? >> > > I mean having Wireshark linked against a newer CRT DLL and glib linked > against an older one, for example. > Yes, that IS one of the main problems that needs to be solved. There are others

Re: [Wireshark-dev] Microsoft Visual C Version 6 support is a bitoutdated ...

2006-12-19 Thread Kukosa, Tomas
Hi! I hope support of MSVC 6 will remain ;-) Will we have common makefile for both versions or one for each of them? Regards, Tomas -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ulf Lamping Sent: Tuesday, December 19, 2006 2:24 AM To: wireshark-de