Re: [Wireshark-dev] decoding Remote Desktop Protocol

2007-11-09 Thread Stephen Fisher
On Mon, Oct 29, 2007 at 06:26:23PM +1100, ronnie sahlberg wrote: > I have commited an initial and very limited X.224 dissector that > registers TPKT on port 3389 and makes TPKT spawn off this port into > X.224 instead. > > The X.224 dissector is very incomplete and only really dissects > CR/CC/DT

Re: [Wireshark-dev] my added dissectors don't appear in the Makefile

2007-11-09 Thread Fulko Hew
On Nov 8, 2007 2:16 PM, Jeff Morriss <[EMAIL PROTECTED]> wrote: > Fulko Hew wrote: > > > > Im just wrapping up development on my enhancements and new > > dissectors for wireshark, and while preparing my patch set, I'm > > testing it by applying it to a virgin tarball. > > > > The developer instruc

[Wireshark-dev] A #define MUST_DO_SELECT problem/question

2007-11-09 Thread Fulko Hew
I was just about to wrap-up my additions to wireshark by porting my enhancements from version 0.99.4 to the latest (0.99.6a 'ish) version from SVN when I encountered an 'issue'. Somewhere between these two versions, there was a change to capture_loop.h that enforces #define MUST_DO_SELECT on linux

Re: [Wireshark-dev] [Wireshark-commits] rev 23419: /trunk/ /trunk/: configure.in

2007-11-09 Thread Guy Harris
On Nov 9, 2007, at 6:27 PM, Stephen Fisher wrote: > Maybe there is a some way to quote the commas to leave them in there? Square brackets. I've checked in a change to do that. ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wires

Re: [Wireshark-dev] [Wireshark-commits] rev 23419: /trunk/ /trunk/: configure.in

2007-11-09 Thread Stephen Fisher
On Sat, Nov 10, 2007 at 02:18:22AM +, [EMAIL PROTECTED] wrote: > http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=23419 > > User: guy > Date: 2007/11/10 02:18 AM > > Log: > Update comment, clean up message. > > Directory: /trunk/ > ChangesPathAction > +7

Re: [Wireshark-dev] what are the steps needed to add a plugin

2007-11-09 Thread yin sun
If you have many plugins to develop, you can create your own Makefile to do everything you need in one file. The steps can be automated with shell scripts, and they are only necessary if you want to blend in your build into the whole wireshark building process. That means you don't need to build wi

Re: [Wireshark-dev] 0.99.7 release?

2007-11-09 Thread Ulf Lamping
Gerald Combs schrieb: > It's been a while since 0.99.6 was released (Holy crap! July 5!), so it would > probably be a good idea to push 0.99.7 out the door. I'd like to make a > prerelease on the 19th or 20th, with a final release a week later. > I've added the things mentioned following your m

Re: [Wireshark-dev] Create a new tvb from a bit offset in the currenttvb

2007-11-09 Thread Anders Broman
Hi, new_octet_aligned_subset_bits() in packet-per.c may be what you want. If so perhaps it should be made a tvbuff function. Best regards Anders -Ursprungligt meddelande- Från: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] För Michael Lum Skickat: den 9 november 2007 18:11 Till: Developer su

[Wireshark-dev] [ANNOUNCE] WinPcap 4.0.2 has been released

2007-11-09 Thread Gianluca Varenni
As of today, WinPcap 4.0.2 is available in the download section of the WinPcap website, http://www.winpcap.org/install/ . This maintenance release addresses a security vulnerability reported by the iDefense Labs in a soon-to-be-released advisory. Full details can be found in the change log atta

[Wireshark-dev] Create a new tvb from a bit offset in the current tvb

2007-11-09 Thread Michael Lum
Hello, does anyone know if there is code or an api call in Wireshark that will allow me to create a new tvb subset a la tvb_new_subset() but from a bit offset? I want to create a subset of a certain length in octets starting with the last 3 bits of the octet I'm currently processing. Example:

Re: [Wireshark-dev] Network Sorcery and protocol documentation

2007-11-09 Thread Maynard, Chris
Ah, I think I know what happened. I started to actually reply to the 0.99.7 release thread but was interrupted and saved a draft. Later, I forgot about the draft and replied again. Still later, I realized I had a draft and simply deleted the content and used that to start the Network Sorcery

Re: [Wireshark-dev] Network Sorcery and protocol documentation

2007-11-09 Thread Jeff Morriss
So you hit "compose new mail" (or its equivalent) to send that email? That's strange because your first email about this Network Sorcery thread contains: > References: <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> which are the Message-IDs for a few of the messages in th

Re: [Wireshark-dev] Network Sorcery and protocol documentation

2007-11-09 Thread Maynard, Chris
I have no idea what you're talking about here. This thread had nothing to do with the 0.99.7 release. I started it as a new thread that simply discusses the Network Sorcery site and ways to possibly improve documentation or at least make folks aware of the site, since I find it useful and mayb

Re: [Wireshark-dev] Network Sorcery and protocol documentation

2007-11-09 Thread Jeff Morriss
Maynard, Chris wrote: > Recently having submitted a protocol dissector and written a wiki page for > it, I was reminded of a very handy web site for protocol documentation that I > reference quite often, namely http://www.networksorcery.com/enp/Protocol.htm. > I think the folks at Network Sor

Re: [Wireshark-dev] PortableApps Wireshark feedback

2007-11-09 Thread Guy Harris
Maynard, Chris wrote: > Oh, one last thing - I read an article, linked from the > www.portableapps.com website that indicated that you could run a > PortableApps application on Linux if you have wine installed. I did not > try that ... yet. Unfortunately, I probably won't be able to try it > until