Re: [Wireshark-dev] SMTP: Extracting parametrs

2008-06-12 Thread goitom kahsay
Dear Abhik, Thank you very much for your help. But, do you think IMF packet always exist in all smtp conversations? Because i need to extract these parameters from all SMTP email communications. Thank you in advance. with best regards, On Wed, Jun 11, 2008 at 11:19 PM, Abhik

Re: [Wireshark-dev] Start Dissection from an upper layer?

2008-06-12 Thread Guillaume Bienkowski
Eloy Paris a écrit : Give something like this a try (this code snippet assumes all the libwireshark initializations have been done already): [snip] fdata-lnk_t = wtap_pcap_encap_to_wtap_encap(DLT_RAW); [snip] Let us know how it goes. Cheers, Eloy Paris.- netexpect.org

Re: [Wireshark-dev] problem to register own protoco...

2008-06-12 Thread Abhik Sarkar
Sub-dissectors can't be added against protocol fields, but against dissector tables. H225 registers the following tables: nsp_object_dissector_table = register_dissector_table(h225.nsp.object, H.225 NonStandardParameter (object), FT_STRING, BASE_NONE); nsp_h221_dissector_table =

[Wireshark-dev] wireshark 1.0.1?

2008-06-12 Thread valentin . ecker
Hi there! A short question: Do you have any plans to make a new release in the near future? thx Valentin___ Wireshark-dev mailing list Wireshark-dev@wireshark.org https://wireshark.org/mailman/listinfo/wireshark-dev

[Wireshark-dev] Need help on wireshark plugin library path setting and open (on hardware not pc box)

2008-06-12 Thread yenan
Hi, folks, need help here! I am tasked to integrate tshark to hardware, therefore we can capture and debug packets internally. We build tshark as a 3rd party tool through image combined with other tools, when installing this image to hardware, a path like $IMAGE will add in front of

Re: [Wireshark-dev] wireshark 1.0.1?

2008-06-12 Thread Jaap Keuter
Hi, That is a good question. As you may already have seen we're collecting a lot of bugfixes in the roadmap and eventually roll them into 1.0.1. When that will be is a little hard to predict. Currently there are some infrastructure problems which have to be sorted first. Then there's an

Re: [Wireshark-dev] Need help on wireshark plugin library path setting and open (on hardware not pc box)

2008-06-12 Thread Jaap Keuter
Hi, Run configure with the '-help' option. That shows all the options you can pass to the script to match the build to your target. Thanx, Jaap yenan wrote: Hi, folks, need help here! I am tasked to integrate tshark to hardware, therefore we can capture and debug packets internally. We

[Wireshark-dev] Failure to dissect long SASL wrapped LDAP response

2008-06-12 Thread Kaul
Wireshark 1.0.0, win32, fails to de-segment (TCP level?) and properly dissect a pretty long (229959 bytes entire conversation) SASL wrapped LDAP response. Regretfully, I cannot share the capture, but the first packet that is not desgemented or dissected in any way (just shows as TCP payload) is

Re: [Wireshark-dev] Failure to dissect long SASL wrapped LDAP response

2008-06-12 Thread Jaap Keuter
Hi, Can you test the last buildbot build? You can find it here: http://www.wireshark.org/download/automated/win32/ Thanx, Jaap Kaul wrote: Wireshark 1.0.0, win32, fails to de-segment (TCP level?) and properly dissect a pretty long (229959 bytes entire conversation) SASL wrapped LDAP

Re: [Wireshark-dev] Failure to dissect long SASL wrapped LDAP response

2008-06-12 Thread Kaul
Oh, that may explain it (from packet-ldap.c) marked with bold/italic/underline: */* check for a SASL header, i.e. assume it is SASL if * 1, first four bytes (SASL length) is an integer *with a value that must be 64k and 2 *(2 to fight false positives, 0x

[Wireshark-dev] Teamspeak2 Dissector

2008-06-12 Thread Brooss
Hi wireshark-dev, A few months ago I completed work on a TeamSpeak2 dissector and posted it on the bug tracker (2373). https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2373 No one seems to have had a chance to review it yet but I would appreciate some feedback on the chances of it getting

[Wireshark-dev] LUA development changing column headers

2008-06-12 Thread Rowswell, Brent
Over the past few weeks I've been trying to make a LUA script to parse out my header information, open up the packet and display the necessary data in a various tree structure. So far all of that has been done well enough, but I find that the packets that I have dissected come maybe once every

Re: [Wireshark-dev] wireshark 1.0.1?

2008-06-12 Thread Andrew Hood
Jaap Keuter wrote: Hi, That is a good question. As you may already have seen we're collecting a lot of bugfixes in the roadmap and eventually roll them into 1.0.1. When that will be is a little hard to predict. Currently there are some infrastructure problems which have to be sorted

Re: [Wireshark-dev] Need help on wireshark plugin library path setting and open (on hardware not pc

2008-06-12 Thread yenan
Hi, Jaap: Thank you very much! I already searched the configure options, there is a --with-plugin[=DIR] option, but same as --prefix option, it will look for an absolute path, is it possible set it to a relative path? like anything similar to ../../PLUNIN_DIR ? Thank you millions! Very

Re: [Wireshark-dev] wireshark 1.0.1?

2008-06-12 Thread Jaap Keuter
Andrew Hood wrote: Jaap Keuter wrote: Hi, That is a good question. As you may already have seen we're collecting a lot of bugfixes in the roadmap and eventually roll them into 1.0.1. When that will be is a little hard to predict. Currently there are some infrastructure problems which

[Wireshark-dev] buildbot failure in Wireshark (development) on Ubuntu-7.10-x86-64

2008-06-12 Thread buildbot-no-reply
The Buildbot has detected a new failure of Ubuntu-7.10-x86-64 on Wireshark (development). Full details are available at: http://buildbot.wireshark.org/trunk/builders/Ubuntu-7.10-x86-64/builds/0 Buildbot URL: http://buildbot.wireshark.org/trunk/ Buildslave for this Build: ubuntu-7.10-x86 Build