Re: [Wireshark-dev] File size limits on Linux and building for large file support

2007-06-26 Thread Ulf Lamping
Stephen Fisher schrieb: > On Tue, Jun 26, 2007 at 08:27:03AM +0200, Ulf Lamping wrote: > >> You'll need to compile without libz, as libz is (optionally?) used to >> work with capture files and it will by default use 32 bit file offsets >> on machines which uses 32 bits for long values. So you

[Wireshark-dev] [PATCH] HTTP Chunked Body Desegmentation Problem

2007-06-26 Thread Mike Duigou
Enclosed is a patch with fixes problems with the desegmentation of chunked HTTP message bodies. The problem occurs with the current source because the TCP desegmentation code appears to obey literally the response asking for "one more byte" that the HTTP dissector was returning. Using the en

Re: [Wireshark-dev] File size limits on Linux and building for large file support

2007-06-26 Thread Shehjar Tikoo
Stephen Fisher wrote: > Would it be worth the effort to put some code in that would use the zlib > reading and writing functions for uncompressed/compressed use < 2GB vs. > normal reading and writing functions for non-compressed files of any > size based on a user preference? I don't know how m

Re: [Wireshark-dev] File size limits on Linux and building for large file support

2007-06-26 Thread Shehjar Tikoo
Joerg Mayer wrote: > On Tue, Jun 26, 2007 at 07:23:33PM +1000, Shehjar Tikoo wrote: >> $ CFLAGS=-D_GNU_SOURCE\ -D_FILE_OFFSET_BITS=64 ./configure >> --enable-wireshark=no --without-zlib > >> Can the devs please modify the configure scripts and add these >> two flags to enable large file support by

Re: [Wireshark-dev] File size limits on Linux and building for large file support

2007-06-26 Thread Stephen Fisher
On Tue, Jun 26, 2007 at 08:27:03AM +0200, Ulf Lamping wrote: > You'll need to compile without libz, as libz is (optionally?) used to > work with capture files and it will by default use 32 bit file offsets > on machines which uses 32 bits for long values. So you can compile > Wireshark/Tshark w

Re: [Wireshark-dev] Developing an application suing pacap in windows which simulates - Network Layer 2 Switch

2007-06-26 Thread Stephen Fisher
On Tue, Jun 26, 2007 at 06:24:09PM +0530, shakthi.pradeep wrote: > I am trying to write an application using pcap in windows which acts > like a Network Layer 2 switch. This is what I am doing. This question is probably best posed to the the company that and/or its mailing lists: http://www.

Re: [Wireshark-dev] Which install files have changed based on source modifications

2007-06-26 Thread Jaap Keuter
Hi, > Thanks, I thought that answer may come up. Only issue with that is > that the user will have to uninstall the version they have before > installing my version :( So? They get back a version even better, usually not a problem. I can do you even better. Release the improvements and they ma

Re: [Wireshark-dev] Which install files have changed based on source modifications

2007-06-26 Thread Greg Bell
Thanks, I thought that answer may come up. Only issue with that is that the user will have to uninstall the version they have before installing my version :( A follow up question on this... can two different Wireshark installations exist on the same system? If so, how can I differentiate m

[Wireshark-dev] [PATCH] Add heur_dissector_delete

2007-06-26 Thread Mike Duigou
Enclosed is a patch which adds 'heur_dissector_delete' to epan/packet.[ch] This allows dynamic removal of heuristic dissectors based upon preferences. An example of use in a prefs reinit function : if( gUDP_HEUR ) { if( !udp_register_done ) { g_message( "Registering UDP Heuristic dissec

Re: [Wireshark-dev] [PATCH] Get correct ExtensionAttributeType + correct CAP values in oraddress in X411

2007-06-26 Thread Stig Bjørlykke
2007/6/26, Stig Bjørlykke <[EMAIL PROTECTED]>: This patch will set correct extension_id for ExtensionAttributeType (error introduced in r22043), and fix printing of CAP values in oraddress (error introduced in r22054). This patch should also be included in 0.99.6. Argh, forgot to add PrivateDo

[Wireshark-dev] [PATCH] Get correct ExtensionAttributeType + correct CAP values in oraddress in X411

2007-06-26 Thread Stig Bjørlykke
Hi. This patch will set correct extension_id for ExtensionAttributeType (error introduced in r22043), and fix printing of CAP values in oraddress (error introduced in r22054). This patch should also be included in 0.99.6. -- Stig Bjørlykke packet-x411-extension-oraddress.patch.gz Description

Re: [Wireshark-dev] File size limits on Linux and building for large file support

2007-06-26 Thread Joerg Mayer
On Tue, Jun 26, 2007 at 07:23:33PM +1000, Shehjar Tikoo wrote: > $ CFLAGS=-D_GNU_SOURCE\ -D_FILE_OFFSET_BITS=64 ./configure > --enable-wireshark=no --without-zlib > Can the devs please modify the configure scripts and add these two flags > to enable large file support by default? > > I've te

[Wireshark-dev] [PATCH] Small fix in RTSE reassembly

2007-06-26 Thread Stig Bjørlykke
Hi. This patch adds a check for octet string in RTSE reassembly. If not an octet string the data is handled as ordinary RTSE APDU. -- Stig Bjørlykke packet-rtse-datacheck.patch.gz Description: GNU Zip compressed data ___ Wireshark-dev mailing list W

[Wireshark-dev] [PATCH] Make PRES context identifiers conversation aware

2007-06-26 Thread Stig Bjørlykke
Hi. This patch makes PRES context identifiers conversion aware. -- Stig Bjørlykke packet-pres-conversion.patch.gz Description: GNU Zip compressed data ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listin

[Wireshark-dev] Developing an application suing pacap in windows which simulates - Network Layer 2 Switch

2007-06-26 Thread shakthi.pradeep
Hello All, I am trying to write an application using pcap in windows which acts like a Network Layer 2 switch. This is what I am doing. 1. PC A has 1 LAN card 2. PC B has 2 LAN cards 3. PC C has 1 LAN card I Connect PC A to PC B over LAN 1 and connect PC C a

Re: [Wireshark-dev] File size limits on Linux and building for large file support

2007-06-26 Thread Shehjar Tikoo
Ulf Lamping wrote: > Shehjar Tikoo schrieb: >> I've seen a few posts in wireshark-users archive where Ulf Lamping >> mentions incorporating support for gint64 offsets for traffic dump files. >> >> Does this imply that tshark can write pcap files using large file >> support on Linux without the ne