[Wireshark-dev] Unused variables

2007-02-12 Thread Gerhard Gappmeier
Hi all, does wireshark have a macro to disable unused variable warnings like Q_UNUSED in Qt? regards, Gerhard. ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-dev

[Wireshark-dev] What do you use to get a boolean

2007-02-12 Thread Hal Lander
Hi, There are various routines to get things like "tvb_get_stringz" and "tvb_get_ntohieee_float" What do you use to get a boolean, I have not found anything? Hal _ FREE online classifieds from Windows Live Expo – buy and sell wit

[Wireshark-dev] Appending string to value

2007-02-12 Thread Amit Khullar
Hi All, I am new to wireshark dissector development, hence a help would be really appreciated. I want to print and additional string with the value of the field in the message decode window. This string I want to print is not a constant but varies depending upon the value of the field. Is there

Re: [Wireshark-dev] Controlling Tshark output format

2007-02-12 Thread Douglas Pratley
Hi > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Gerald Combs > Sent: 08 February 2007 01:12 > To: Developer support list for Wireshark > Subject: Re: [Wireshark-dev] Controlling Tshark output format > > Would it make more sense to extend the cur

Re: [Wireshark-dev] Unused variables

2007-02-12 Thread Jeff Morriss
Gerhard Gappmeier wrote: > Hi all, > > does wireshark have a macro to disable unused variable warnings > like Q_UNUSED in Qt? Wireshark has _U_ (when using a compiler where we're able to disable such warnings). ___ Wireshark-dev mailing list Wiresha

Re: [Wireshark-dev] Appending string to value

2007-02-12 Thread Jeff Morriss
[BTW, it's better to compose a new email rather than reply to an existing one on a different topic when sending to public mailing lists.] Amit Khullar wrote: > Hi All, > > I am new to wireshark dissector development, hence a help would be > really appreciated. > I want to print and additional s

Re: [Wireshark-dev] What do you use to get a boolean

2007-02-12 Thread Jeff Morriss
Hal Lander wrote: > Hi, > > There are various routines to get things like "tvb_get_stringz" and > "tvb_get_ntohieee_float" > What do you use to get a boolean, I have not found anything? What's a boolean? Is it a 32-bit entity? Frequently, but it might not always be. You probably want to use

Re: [Wireshark-dev] What do you use to get a boolean

2007-02-12 Thread Hal Lander
Wireshark has a field type FT_BOOLEAN. It lets you add the boolean to the tree using proto_tree_add_boolean(tree, id, tvb, start, length, value); and is supposed to do all the bit shifting for you to extract the single bit 0 or 1. I thought it might also provide some way for me to test the bit va

Re: [Wireshark-dev] What do you use to get a boolean

2007-02-12 Thread Jeff Morriss
Hal Lander wrote: > Wireshark has a field type FT_BOOLEAN. > It lets you add the boolean to the tree using > proto_tree_add_boolean(tree, id, tvb, start, length, value); > and is supposed to do all the bit shifting for you to extract the single bit > 0 or 1. > > I thought it might also provide

Re: [Wireshark-dev] Unused variables

2007-02-12 Thread Gerhard Gappmeier
I see. This works a little bit different than I expected. void method(int _U_) { } just becomes void method(int ) { } I'm not sure if every compiler accepts that or also outputs a warning if the parameter name is missing. I was searching for something like that: void method(int iPar

Re: [Wireshark-dev] Unused variables

2007-02-12 Thread Jeff Morriss
Gerhard Gappmeier wrote: > I see. This works a little bit different than I expected. > void method(int _U_) > { > } > just becomes > void method(int ) > { > } > I'm not sure if every compiler accepts that or also outputs a warning if the > parameter name is missing. In fact it shoul

Re: [Wireshark-dev] What do you use to get a boolean

2007-02-12 Thread Hal Lander
I have not got as far as getting the value of the boolean, I was was looking for a function to extract it. I am also not sure if 'value' really is the value of the boolean or the value of the byte containing the boolean (along with other data)? Hal From: Jeff Morriss <[EMAIL PROTECTED]>

Re: [Wireshark-dev] Unused variables

2007-02-12 Thread Gerhard Gappmeier
> In fact it should be used like: > > void method(int foo _U_) > > which should become > > void method(int foo __attribute__((unused))) > > I'm not sure if _U_ is implemented for anything other than GCC, though. > What compiler are you using? > ok, I See. I'm using MSVC6 on XP and GCC on Gen

Re: [Wireshark-dev] What do you use to get a boolean

2007-02-12 Thread Hal Lander
It does look like the value you pass to proto_tree_add_boolean(tree, id, tvb, start, length, value); is not a 1 or a 0 it is the raw data byte containing the boolean at the position defined by the mask. If I am correct this makes the documentation a bit missleading. Anybody know if there is a

[Wireshark-dev] Lightweigth tshark anybody?

2007-02-12 Thread Lars Ruoff
Hi list! I would like to compile my own light-weight version of tshark, with only a minimum of protocols enabled (basically all i need is Frame,etherent,IP,UDP/TCP,RTP,RTCP + some dependencies). The goal is to substantially reduce the size of libwireshark.dll . I remember running into dependency

[Wireshark-dev] Changing version number for Wireshark

2007-02-12 Thread Erik Bender
Hi, I have the source code for Wireshark 0.99.4. Now, I made some small modifications/changes to it for internal purposes in my company and would like to change the version of it to something that I can easily recognize when checking the "Help->About" menu. Something like "0.99.4-my_company_name

Re: [Wireshark-dev] Using wireshark protocol parsers to buildpackets

2007-02-12 Thread [Chris] NULL
>I don't see any code posted for these two tools, but you may want to >contact the people involved: >http://www-nrg.ee.lbl.gov/LBNL-FTP-ANON.html >http://www.ece.gatech.edu/research/labs/nsa/honeynet/tools/pcap-anon.shtml Thanks for the links. Actually there is a lot of research going on on this

Re: [Wireshark-dev] Win32 buildbot unhappy while building docs

2007-02-12 Thread Douglas Pratley
For what it's worth, "wsug.validated" builds fine on my machine, both using nmake and cygwin make. Unless I've not noticed a commit that fixes this, perhaps this is a problem with the build machine environment? Apologies if you've already got that far in your debugging. Cheers Doug > -Ori

Re: [Wireshark-dev] Unused variables

2007-02-12 Thread Michael Tuexen
Question in-line. Best regards Michael On Feb 12, 2007, at 3:39 PM, Gerhard Gappmeier wrote: > >> In fact it should be used like: >> >> void method(int foo _U_) >> >> which should become >> >> void method(int foo __attribute__((unused))) >> >> I'm not sure if _U_ is implemented for anything othe

Re: [Wireshark-dev] Appending string to value

2007-02-12 Thread Stephen Fisher
On Mon, Feb 12, 2007 at 09:33:33PM +0800, Jeff Morriss wrote: > /** Append to text of item after it has already been created. > @param ti the item to append the text to > @param format printf like format string > @param ... printf like parameters */ > extern void proto_item_append_text(proto_it

Re: [Wireshark-dev] Unused variables

2007-02-12 Thread Guy Harris
Gerhard Gappmeier wrote: > I see. This works a little bit different than I expected. > void method(int _U_) > { > } > just becomes > void method(int ) > { > } Why would you do that? If "method" doesn't need to take a parameter, it should be void method(void) {

[Wireshark-dev] gtk/Makefile.am patch

2007-02-12 Thread Albert Chin
Building 0.99.5 on RHEL 4/amd64 with a gnutls outside of /usr/lib, the build fails with: ../epan/dissectors/packet-ssl-utils.h:38:25: gnutls/x509.h: No such file or directory ../epan/dissectors/packet-ssl-utils.h:39:28: gnutls/openssl.h: No such file or directory ssl-dlg.c: In function `ssl

Re: [Wireshark-dev] Unused variables

2007-02-12 Thread Gerhard Gappmeier
>> So >> #define REFERENCE_PARAMETER(name) (void)name; >> works good for me. >> void method(int foo) >> { >> REFERENCE_PARAMETER(foo); >> } >> >> The intel compiler is a little bit different, that's why trolltech >> uses >> this kind of define. >> >> #if defined(Q_CC_INTEL) && !defined(Q_OS_WI

Re: [Wireshark-dev] What do you use to get a boolean

2007-02-12 Thread Guy Harris
Hal Lander wrote: > Anybody know if there is a function that returns the boolean (1 or 0) > value of the flag or do I have to do the masking myself to get it? You have to do the masking yourself; that is the case for all bitfields, not just Boolean bitfields (not all bitfields are Boolean, and

Re: [Wireshark-dev] Controlling Tshark output format

2007-02-12 Thread Guy Harris
Douglas Pratley wrote: > b) I didn't want to restrict the possible names of fields. So far, all > the ones in Wireshark are "sensible" strings, but I can't find any code > that restricts them, so they might contain commas, spaces, etc. See the loop in proto_register_field_init() which scans hfinf

Re: [Wireshark-dev] Changing version number for Wireshark

2007-02-12 Thread Ulf Lamping
Erik Bender wrote: > > Hi, > > I have the source code for Wireshark 0.99.4. Now, I made some small > modifications/changes to it for internal purposes in my company and > would like to change the version of it to something that I can easily > recognize when checking the "Help->About" menu. Somet

[Wireshark-dev] [PATCH] Option to decode unknown BER OCTET STRING as BER encoded data

2007-02-12 Thread Stig Bjørlykke
Hi. This patch adds some new features to the BER dissector: - Added option to decode OCTET STRINGs as BER encoded data - Added decoding of unknown VisibleString and GeneralString - Some code cleanup -- Stig Bjørlykke packet-ber.patch.gz Description: GNU Zip compressed data

Re: [Wireshark-dev] gtk/Makefile.am patch

2007-02-12 Thread Luis Ontanon
Committed revision 20796. On 2/12/07, Albert Chin <[EMAIL PROTECTED]> wrote: > Building 0.99.5 on RHEL 4/amd64 with a gnutls outside of /usr/lib, the > build fails with: > ../epan/dissectors/packet-ssl-utils.h:38:25: gnutls/x509.h: No such file or > directory > ../epan/dissectors/packet-ssl-

Re: [Wireshark-dev] Win32 buildbot unhappy while building docs

2007-02-12 Thread Gerald Combs
It looks like the builder hung at some point. I've restarted it. Douglas Pratley wrote: > For what it's worth, "wsug.validated" builds fine on my machine, both > using nmake and cygwin make. > > Unless I've not noticed a commit that fixes this, perhaps this is a > problem with the build machine

Re: [Wireshark-dev] SCTP Reassembly

2007-02-12 Thread Anders Broman
Hi, Thanks works nicely for the trace I've got. BR Anders -Ursprungligt meddelande- Från: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] För Michael Tuexen Skickat: den 9 februari 2007 18:14 Till: Developer support list for Wireshark Ämne: Re: [Wireshark-dev] SCTP Reassembly Hi Anders, SCTP

[Wireshark-dev] Statistics UI for proprietary plugin

2007-02-12 Thread Filonenko Alexander-AAF013
Looking for an advice on how to add UI to a dissector plugin for proprietary protocol . Ideally, if the plugin is present then the "Statistics" menu would have another menu item to open the UI. Are there any suggestions/existing examples of such plugins? Thank you, Alex Filonenko

Re: [Wireshark-dev] Statistics UI for proprietary plugin

2007-02-12 Thread Guy Harris
On Feb 12, 2007, at 11:59 AM, Filonenko Alexander-AAF013 wrote: > Looking for an advice on how to add UI to a dissector plugin for > proprietary protocol . Dissectors themselves can't have UI, but.. > Ideally, if the plugin is present then the "Statistics" menu would > have another menu ite

[Wireshark-dev] doc/README.tapping typo question

2007-02-12 Thread Stephen Fisher
I am reading doc/README.tapping and found a few typos that I am going to correct. However, since I am still learning about using the tapping mechanisms, I am not sure what two of the words are supposed to be: --- The *data structure type is specific to each tap. This function returns an int an

Re: [Wireshark-dev] doc/README.tapping typo question

2007-02-12 Thread ronnie sahlberg
On 2/13/07, Stephen Fisher <[EMAIL PROTECTED]> wrote: > > I am reading doc/README.tapping and found a few typos that I am going to > correct. However, since I am still learning about using the tapping > mechanisms, I am not sure what two of the words are supposed to be: > > --- > The *data structu

Re: [Wireshark-dev] Lightweigth tshark anybody?

2007-02-12 Thread Kukosa, Tomas
Hi, what about having two new files? One defining dependencies among dissectors and one where it would be posiible to tell what dissectors should be included/excluded in compilation. Then some new tool (probably written in Python) would create list of necessary files for compilation and linking.

[Wireshark-dev] How to extract frames from .msgBuffer file or convert .msgBuffer file to a capture file

2007-02-12 Thread [EMAIL PROTECTED] Best tiwari
Hi, Please guide me. I have one file with extension ".msgBuffer" but i am not able to analyse the content of the file. How to extract frames from ".msgBuffer" file or convert ".msgBuffer" file to a capture file or pointer to some tool that can help me. regards, ravindra