[Wireshark-dev] buildbot failure in OSX-10.4-PPC

2008-03-12 Thread buildbot-no-reply
The Buildbot has detected a new failure of OSX-10.4-PPC. Full details are available at: http://buildbot.wireshark.org/trunk/OSX-10.4-PPC/builds/2195 Buildbot URL: http://buildbot.wireshark.org/trunk/ Build Reason: Build Source Stamp: HEAD Blamelist: sfisher BUILD FAILED: failed failed slave lo

Re: [Wireshark-dev] Unable to register over TCAP

2008-03-12 Thread atdev.queries
In the proto_register_xxx(void) , xxx_module = prefs_register_protocol(proto_xxx, proto_reg_handoff_xxx); hope the above statement will call proto_reg_handoff_xxx(void). proto_reg_handoff_xxx(void){ . xxx_handle = create_dissector_handle(dissect_xxx, proto_xxx); .. } This function i

Re: [Wireshark-dev] parent level tvb access for fragmented and compiled packets

2008-03-12 Thread Guy Harris
On Mar 12, 2008, at 8:52 PM, khushbu thakkar wrote: > Thanx for the response. > By parent-level tvb i meant top level tvbuff. > I need Destination IP Address and Differentiated Service Field from > IP layer. Can it be possible to get. Destination IP address, yes - pinfo->net_dst is an "address

[Wireshark-dev] buildbot failure in Ubuntu-7.01-x86-64

2008-03-12 Thread buildbot-no-reply
The Buildbot has detected a new failure of Ubuntu-7.01-x86-64. Full details are available at: http://buildbot.wireshark.org/trunk/Ubuntu-7.01-x86-64/builds/3012 Buildbot URL: http://buildbot.wireshark.org/trunk/ Build Reason: Build Source Stamp: HEAD Blamelist: jake,jmayer,stig BUILD FAILED: f

Re: [Wireshark-dev] parent level tvb access for fragmented and compiled packets

2008-03-12 Thread khushbu thakkar
Thanx for the response. By parent-level tvb i meant top level tvbuff. I need Destination IP Address and Differentiated Service Field from IP layer. Can it be possible to get. Reply Soon, Thank You, Khushbu On Wed, Mar 12, 2008 at 11:08 PM, Guy Harris <[EMAIL PROTECTED]> wrote: > khushbu thakkar

[Wireshark-dev] buildbot failure in Windows-XP-x86

2008-03-12 Thread buildbot-no-reply
The Buildbot has detected a new failure of Windows-XP-x86. Full details are available at: http://buildbot.wireshark.org/trunk/Windows-XP-x86/builds/4085 Buildbot URL: http://buildbot.wireshark.org/trunk/ Build Reason: Build Source Stamp: HEAD Blamelist: jmayer BUILD FAILED: failed shell_5 sin

[Wireshark-dev] buildbot failure in OSX-10.4-PPC

2008-03-12 Thread buildbot-no-reply
The Buildbot has detected a new failure of OSX-10.4-PPC. Full details are available at: http://buildbot.wireshark.org/trunk/OSX-10.4-PPC/builds/2192 Buildbot URL: http://buildbot.wireshark.org/trunk/ Build Reason: Build Source Stamp: HEAD Blamelist: jmayer BUILD FAILED: failed compile sincere

Re: [Wireshark-dev] 1.0pre1 reminder

2008-03-12 Thread Jaap Keuter
Hi, This sounds much like work flow management to me. Requiring a triaging staff and a common knowledge of the procedures to follow. I'm not convinced Bugzilla is good for that. My experience tells me that reading the entered comments usually gives a pretty good picture of the state of affairs

Re: [Wireshark-dev] 1.0pre1 reminder

2008-03-12 Thread Stephen Fisher
On Wed, Mar 12, 2008 at 09:50:44AM +0100, Peter Johansson wrote: > Does anyone know the amount of open bug reports that should be fairly > easy (straightforward) to solve if only anybody would find time to > address them? Or is it required that each and every one of us who feel > an urge to add

Re: [Wireshark-dev] 1.0pre1 reminder

2008-03-12 Thread Jaap Keuter
Hi, Everyone is invited to submit patches or their insight into the issues listed. What may seem like a huge task to one can be easy for another. Just leave a hint if you're working on something and you may get feedback from others. Thanx, Jaap Peter Johansson wrote: > Does anyone know the amo

Re: [Wireshark-dev] parent level tvb access for fragmented and compiled packets

2008-03-12 Thread Guy Harris
khushbu thakkar wrote: > Now my question is if we have have a UDP packet compiling fragmented IP > packets eg: Frame no. 33 of attached file. With the statement > "tvb->ds_tvb" we can get access to parent-level tvb. But for fragmented > and compiled frames as no. 33 this does not work. So for s

[Wireshark-dev] Wireshark and Matlab

2008-03-12 Thread Armen Babikyan
Hello, A few months ago, I wrote a tool that lets me use Wireshark's packet dissection capabilities in Matlab, to numerically analyze packets. For example: >> b = tshark_read('ws1.pcap', {'frame.number', 'ip.version', 'tcp.seq', 'udp.dstport', 'frame.pkt_len'}, 'ip.version eq 4') b = 1x14630

Re: [Wireshark-dev] make error

2008-03-12 Thread Anders Broman
Hi, A fix was recently checked in http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=24603 User: stig Date: 2008/03/11 05:27 PM Log: Add check for gtk 2.4 when calling gtk_tree_view_column_set_expand. Directory: /trunk/gtk/ ChangesPath Action +2 -0

Re: [Wireshark-dev] Unable to register over TCAP

2008-03-12 Thread Luis EG Ontanon
is it proto_reg_handoff_xxx (ok) or just proto_reg_handoff (won't do) ? On Wed, Mar 12, 2008 at 1:22 PM, <[EMAIL PROTECTED]> wrote: > Hi, > > I had already included the packet_x.c in Makefile.common and also tried "rm > epan/dissectors/register.c" but no luck. The proto_register_xxx function

Re: [Wireshark-dev] Unable to register over TCAP

2008-03-12 Thread atdev.queries
Hi, I had already included the packet_x.c in Makefile.common and also tried "rm epan/dissectors/register.c" but no luck. The proto_register_xxx function is working fine, but proto_reg_handoff is not. From: [EMAIL PROTECTED] on behalf of Luis EG Ontanon Sent:

Re: [Wireshark-dev] Unable to register over TCAP

2008-03-12 Thread Luis EG Ontanon
have you added your packet-x.c file to Makefile.common ? if so, try "rm epan/dissectors/register.c" and make again. On Wed, Mar 12, 2008 at 11:33 AM, <[EMAIL PROTECTED]> wrote: > > > Hi all , > > I have written a dissector ( ASN.1 format), which runs over ETSI-TCAP. > Now,this dissector has a

[Wireshark-dev] Unable to register over TCAP

2008-03-12 Thread atdev.queries
Hi all , I have written a dissector ( ASN.1 format), which runs over ETSI-TCAP. Now,this dissector has an SCCP sub-system number.In general , the sub-dissectors running over ITU-TCAP( eg : camel , GSMMAP) are registered in the following way: In the proto_register_xxx(void): range_convert_str(&

Re: [Wireshark-dev] 1.0pre1 reminder

2008-03-12 Thread Peter Johansson
Does anyone know the amount of open bug reports that should be fairly easy (straightforward) to solve if only anybody would find time to address them? Or is it required that each and every one of us who feel an urge to address these that we need to sort it out ourselves. / Peter 2008/3/11, Jaap

Re: [Wireshark-dev] Question

2008-03-12 Thread niel m
Thank you very much Jaap for the inputs and help :) I will never forget you bro :) On Wed, Mar 12, 2008 at 2:14 PM, Jaap Keuter <[EMAIL PROTECTED]> wrote: > Hi Niel, > > First of all, this looks more like a user question, so wireshark-users > would > be a better list. > > But since we're her

Re: [Wireshark-dev] [tcpdump-workers] Which versions of pcap files accept pcap_open_offline()?

2008-03-12 Thread Florent Drouin
In the previous version of Wireshark, the conversion from ERF to libpcap was like this: For TYPE_ATM, TYPE_AAL5 WTAP_ENCAP_ATM_PDUS; or WTAP_ENCAP_ATM_RFC1483; or WTAP_ENCAP_ATM_PDUS_UNTRUNCATED; For TYPE_ETH: WTAP_ENCAP_ETHERNET; For TYPE_HDLC_POS: WTAP_ENC

Re: [Wireshark-dev] [patch] export as C arrays

2008-03-12 Thread Francesco Fondelli
On Tue, Mar 11, 2008 at 8:02 PM, Guy Harris <[EMAIL PROTECTED]> wrote: > Francesco Fondelli wrote: > > > Attached is a patch to export packets data as "C Arrays". I often > > have the need to [re]send data captured with wireshark using a > > raw/pf_packet socket. Output format is one char[] pe