Re: [Wireshark-dev] Wierd code in m2m plugin

2007-07-27 Thread Jaap Keuter
so this has no place in production code. Shouldn't we rip it out? Thanx, Jaap Jeff Morriss wrote: > Jaap Keuter wrote: >> Hi, >> >> Can anyone tell me why this hideous hack is in the m2m plugin? > > My reading of it is that someone was re-using (in his/her personal build > of Wireshark) on

Re: [Wireshark-dev] ../../epan/dissectors/packet-per.h:37: error: expected declaration specifiers or '...' before 'asn1_ctx_t'

2007-07-27 Thread yin sun
the epan/dissectors/packet-per.h is missing this #include On 7/27/07, yin sun <[EMAIL PROTECTED]> wrote: > > I am recompilling my plugins from 0.99.5 to 0.99.6 under Suse linux > everything is ok under 0.99.5, 0.99.6 wireshark also complies, but my > plugin compilation failed > > gcc -DHAVE_CONFI

[Wireshark-dev] ../../epan/dissectors/packet-per.h:37: error: expected declaration specifiers or '...' before 'asn1_ctx_t'

2007-07-27 Thread yin sun
I am recompilling my plugins from 0.99.5 to 0.99.6 under Suse linux everything is ok under 0.99.5, 0.99.6 wireshark also complies, but my plugin compilation failed gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../.. -I/local/scratch/usr/local/include -I/usr/local/include -I/usr/include -DINET6 "-D_U_=__at

Re: [Wireshark-dev] Improve Tcap session management

2007-07-27 Thread Jeff Morriss
Wow, that was fast, thanks! By the way, why not rename these functions with "ANSI" and "ITU" in the name? > +/* > + * Call ITU Subdissector to decode the Tcap Component > + */ > static int > dissect_tcap_TheComponent(gboolean implicit_tag _U_, tvbuff_t *tvb, int > offset, asn1_> [...] > +/

Re: [Wireshark-dev] Wierd code in m2m plugin

2007-07-27 Thread Jeff Morriss
Jaap Keuter wrote: > Hi, > > Can anyone tell me why this hideous hack is in the m2m plugin? My reading of it is that someone was re-using (in his/her personal build of Wireshark) one of the COL_* for a "Frame" column but didn't want the value put in the "FW-1 monitor if/direction" column in the

[Wireshark-dev] Wierd code in m2m plugin

2007-07-27 Thread Jaap Keuter
Hi, Can anyone tell me why this hideous hack is in the m2m plugin? > case TLV_FRAME_NUM: > /* get the frame number */ > g_frame_number = tvb_get_ntoh24( tvb, > offset ); >

Re: [Wireshark-dev] Improve Tcap session management

2007-07-27 Thread Florent Drouin
Hi, Here is the updated patch. Regards Florent Jeff Morriss wrote: Florent Drouin wrote: Hi, Could you apply this patch to improve the Tcap session management, and create the missing version tag in epan/tcap-persistentdata.c and epan/tcap-persistentdata.h ? Unfortunately a c

Re: [Wireshark-dev] Improve Tcap session management

2007-07-27 Thread Jeff Morriss
Florent Drouin wrote: >Hi, > > Could you apply this patch to improve the Tcap session management, > and create the missing version tag in epan/tcap-persistentdata.c and > epan/tcap-persistentdata.h ? Unfortunately a couple changes squeezed into tcap.cnf since you submitted this patch (one f

Re: [Wireshark-dev] Improve Tcap session management

2007-07-27 Thread Florent Drouin
Ok, I will do it. Regards Florent Jeff Morriss wrote: > Florent Drouin wrote: > >>Hi, >> >> Could you apply this patch to improve the Tcap session management, >> and create the missing version tag in epan/tcap-persistentdata.c and >> epan/tcap-persistentdata.h ? >> > > Unfortunately a

[Wireshark-dev] Holding state between packets for an encryption protocol?

2007-07-27 Thread David Zarlengo
Hi all, I'm looking at writing my first dissector for a protocol which generates a session key to encrypt the remaining packets. Where can I store this session key so that it's available for subsequent packets? What's a good dissector to use as an example of this class of protocols? Thanks, Da

Re: [Wireshark-dev] Missing export in libwireshark (tap)

2007-07-27 Thread Jeff Morriss
[EMAIL PROTECTED] wrote: > I was trying to use the tap-feature (epan/tap.c) in my dissector. > > Unfortunately, the linker cannot find the function “fetch_tapped_data”. > > Is there any reason, why this function is not included the exports of > libwireshark.def? Probably only that nobody ever

Re: [Wireshark-dev] tvb in a conversation

2007-07-27 Thread Sebastien Tandel
please don't do this! thanks :) On Jul 27, 2007, at 6:37 AM, Andreas Sikkema wrote: I want to use the tvb from one packet in another packet. So I use conversations for that. When I use this conversation later in another packet, I can't use the tvb from the conversation. If I simple print the

Re: [Wireshark-dev] tvb in a conversation

2007-07-27 Thread Andreas Sikkema
> I want to use the tvb from one packet in another packet. So I > use conversations for that. > > When I use this conversation later in another packet, I can't > use the tvb from the conversation. If I simple print the type > of the tvbuffer, the output is something like 14343243 > instead of

[Wireshark-dev] decoding java object stream

2007-07-27 Thread yin sun
Hi, I am making a plugin for Java Serialized object stream. Similar questions occur to me. As the stream doesn't indicate length, so it could run very long inside one tcp stream. I can use conversation to preserve the information across packets. But how do I handle the boundary case. How do I dete

[Wireshark-dev] Support for RFC 2786 for SNMP V3 keys

2007-07-27 Thread Rajasankar K
Hi, Wireshark takes the password for SNMP V3 USM users using the snmp_users file. Internally it uses the key localisation algorithm in function - snmp_usm_password_to_key_sha1. But when we use Diffie-Hellman algo as specified in RFC 2786, keys are already localised and hence wireshark should no

[Wireshark-dev] review_for_checkin requested: [Bug 1518] Bad g_asser in color_filter for coloring rules edition

2007-07-27 Thread bugzilla-request-daemon
Jaap Keuter <[EMAIL PROTECTED]> has asked for review_for_checkin: Bug 1518: Bad g_asser in color_filter for coloring rules edition http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1518 ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://w

Re: [Wireshark-dev] tvb in a conversation

2007-07-27 Thread Stratemeier, Frank
You can achieve this by defining your own data struct which contains information that you want to pass. You can allocate memory for this using se_alloc or using g_mem_chunk.. Then you attach this struct to the conversation using conversation_add_proto_data and when you want to retrieve this dat

Re: [Wireshark-dev] tvb in a conversation

2007-07-27 Thread Gilbert Ramirez
You can use conversations to share data between packets. However, it knows nothing about tvbuffs. Tvbuffs will be "garbage collected" once they're not referenced anymore. I suppose you could increment the usage count on the tvbuff so that it won't be garbage-collected until the conversation itself

Re: [Wireshark-dev] tvb in a conversation

2007-07-27 Thread Manuel Jung
Is there another possibilty to use some bytes from one packet later in another one. -- GMX FreeMail: 1 GB Postfach, 5 E-Mail-Adressen, 10 Free SMS. Alle Infos und kostenlose Anmeldung: http://www.gmx.net/de/go/freemail ___ Wireshark-dev mailing list Wir

Re: [Wireshark-dev] tvb in a conversation

2007-07-27 Thread Ulf Lamping
Manuel Jung schrieb: > Hello, > > I want to use the tvb from one packet in another packet. So I use > conversations for that. > > When I use this conversation later in another packet, I can't use the tvb > from the conversation. If I simple print the type of the tvbuffer, the output > is somethi

[Wireshark-dev] tvb in a conversation

2007-07-27 Thread Manuel Jung
Hello, I want to use the tvb from one packet in another packet. So I use conversations for that. When I use this conversation later in another packet, I can't use the tvb from the conversation. If I simple print the type of the tvbuffer, the output is something like 14343243 instead of 0,1 or

[Wireshark-dev] Missing export in libwireshark (tap)

2007-07-27 Thread HPfrommer
Hi, I was trying to use the tap-feature (epan/tap.c) in my dissector. Unfortunately, the linker cannot find the function "fetch_tapped_data". Is there any reason, why this function is not included the exports of libwireshark.def? Regards, Holger Hilscher Gesellschaft fur Systemautom