Re: [Wireshark-dev] Brutal patch to build with GTK 3.0

2011-08-18 Thread Anders Broman
-Original Message- From: wireshark-dev-boun...@wireshark.org [mailto:wireshark-dev-boun...@wireshark.org] On Behalf Of Joerg Mayer Sent: den 19 augusti 2011 07:23 To: Developer support list for Wireshark Subject: Re: [Wireshark-dev] Brutal patch to build with GTK 3.0 On Thu, Aug 18, 20

Re: [Wireshark-dev] [Wireshark-commits] rev 38606: /trunk/gtk/ /trunk/gtk/: prefs_dlg.c

2011-08-18 Thread Joerg Mayer
On Thu, Aug 18, 2011 at 04:13:10PM -0700, Gerald Combs wrote: > The deprecated code has been removed in r38610 (I should have caught it > a couple of years ago when updating airpcap_dlg.c). Thanks! > The AirPcap files and functions should be given more generic names, such > as "main_wireless_tool

Re: [Wireshark-dev] Brutal patch to build with GTK 3.0

2011-08-18 Thread Joerg Mayer
On Thu, Aug 18, 2011 at 03:00:23PM +0200, Anders Broman wrote: > With the enclosed patch Wireshark builds on GTK3.0. Colors are messed up etc > but it should be possible to start to fix things and actually see what's > happening. > I wouldn't be surprised if many patches leading up to this are fa

[Wireshark-dev] Case-insensitive searching for .whatever files?

2011-08-18 Thread Guy Harris
In http://ask.wireshark.org/questions/5726/newbie-trying-to-get-lua-scripts-to-execute it says Wireshark tries to load Lua files from all plugins directories (specified in the Wireshark manual). The file extensions must be ".lua" (case sensitive). Directories under plugins are

Re: [Wireshark-dev] why wireshark plugin does not work here - dissector_add_uint()

2011-08-18 Thread Guy Harris
On Aug 18, 2011, at 2:08 PM, John x wrote: > I am working on 1.4.4 now. So I do used dissector_add_port > but after I put the generated .so file under > /usr/lib/wireshark/plugins/1.4.1/, then I run wireshark, it shows: > > Couldn't load module /usr/lib/wireshark/plugins/1.4.4/xxx.so: underfin

Re: [Wireshark-dev] Brutal patch to build with GTK 3.0

2011-08-18 Thread Stephen Fisher
On Thu, Aug 18, 2011 at 05:55:43PM -0600, Stephen Fisher wrote: > On Thu, Aug 18, 2011 at 06:31:56PM +0200, Anders Broman wrote: > > > I don't mind if some one commits the patch, but I think you have to > > build with the new UI MANAGER on GTK 3.0 as there is quite a bit of > > "factory" stuff

Re: [Wireshark-dev] Brutal patch to build with GTK 3.0

2011-08-18 Thread Stephen Fisher
On Thu, Aug 18, 2011 at 06:31:56PM +0200, Anders Broman wrote: > I don't mind if some one commits the patch, but I think you have to > build with the new UI MANAGER on GTK 3.0 as there is quite a bit of > "factory" stuff left to fix. Unless we want to break the remaining > statistics functions

Re: [Wireshark-dev] [Wireshark-commits] rev 38606: /trunk/gtk/ /trunk/gtk/: prefs_dlg.c

2011-08-18 Thread Guy Harris
On Aug 18, 2011, at 4:13 PM, Gerald Combs wrote: > There's no reason to limit the ability to set the 802.11 channel et al > to a subset of Windows users. That'd be platform-dependent for now (until I get the chance to put APIs, and implementations thereof, for channel-querying and channel-chang

Re: [Wireshark-dev] [Wireshark-commits] rev 38606: /trunk/gtk/ /trunk/gtk/: prefs_dlg.c

2011-08-18 Thread Gerald Combs
On 8/18/11 1:46 PM, Stephen Fisher wrote: > On Thu, Aug 18, 2011 at 10:30:40PM +0200, Joerg Mayer wrote: > >> I'd rather disable building with AIRPCAP. If this code is unmaintained >> then this would be more appropriate. > > That code (should be) maintained like the rest of our regular GTK code,

Re: [Wireshark-dev] Provision to filter the packets based on the value of specific protocol for custom dissector.

2011-08-18 Thread Stephen Fisher
On Thu, Aug 18, 2011 at 03:55:02PM -0500, Mrunal Upadhyay wrote: > Yes that is absolutely correct. It would have been great if the users > can filter the packets from the UI screen itself just by filtering > from the UI on the basis of the protocol value. And if I need to do it > for a custom d

Re: [Wireshark-dev] [Wireshark-commits] rev 38607: /trunk/ /trunk/: configure.in

2011-08-18 Thread Joerg Mayer
On Thu, Aug 18, 2011 at 02:59:44PM -0600, Stephen Fisher wrote: > On Thu, Aug 18, 2011 at 08:38:26PM +, jma...@wireshark.org wrote: > > http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=38607 > > > > User: jmayer > > Date: 2011/08/18 01:38 PM > > > > Log: > > When building wit

Re: [Wireshark-dev] why wireshark plugin does not work here - dissector_add_uint()

2011-08-18 Thread John x
Hi, I am working on 1.4.4 now. So I do used dissector_add_port but after I put the generated .so file under /usr/lib/wireshark/plugins/1.4.1/, then I run wireshark, it shows: Couldn't load module /usr/lib/wireshark/plugins/1.4.4/xxx.so: underfined symbol: dissector_add_port Any advice? Thank

Re: [Wireshark-dev] can't filter field in wireshark

2011-08-18 Thread Jaap Keuter
On 18 aug. 2011, at 17:08, Graham Bloice wrote: > On 18/08/2011 15:26, moussa.alaw...@zodiacaerospace.com wrote: >> Can someone help me >> >> >> >> De :Moussa Alawieh/LES ULIS/ZDF/BTECH/ZODIAC >> >> -

Re: [Wireshark-dev] [Wireshark-commits] rev 38607: /trunk/ /trunk/: configure.in

2011-08-18 Thread Stephen Fisher
On Thu, Aug 18, 2011 at 08:38:26PM +, jma...@wireshark.org wrote: > http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=38607 > > User: jmayer > Date: 2011/08/18 01:38 PM > > Log: > When building with GTK3 we *must* use the ui-manager interface, > the ItemFactory stuff doesn't

Re: [Wireshark-dev] Provision to filter the packets based on the value of specific protocol for custom dissector.

2011-08-18 Thread Mrunal Upadhyay
Hi Yes that is absolutely correct. It would have been great if the users can filter the packets from the UI screen itself just by filtering from the UI on the basis of the protocol value. And if I need to do it for a custom dissector are there any ways to do it? Thank You, From: Stephen Fis

Re: [Wireshark-dev] [Wireshark-commits] rev 38606: /trunk/gtk/ /trunk/gtk/: prefs_dlg.c

2011-08-18 Thread Michael Tuexen
On Aug 18, 2011, at 10:46 PM, Stephen Fisher wrote: > On Thu, Aug 18, 2011 at 10:30:40PM +0200, Joerg Mayer wrote: > >> I'd rather disable building with AIRPCAP. If this code is unmaintained >> then this would be more appropriate. > > That code (should be) maintained like the rest of our regul

Re: [Wireshark-dev] [Wireshark-commits] rev 38606: /trunk/gtk/ /trunk/gtk/: prefs_dlg.c

2011-08-18 Thread Jeff Morriss
On 08/18/2011 04:46 PM, Stephen Fisher wrote: On Thu, Aug 18, 2011 at 10:30:40PM +0200, Joerg Mayer wrote: I'd rather disable building with AIRPCAP. If this code is unmaintained then this would be more appropriate. That code (should be) maintained like the rest of our regular GTK code, except

Re: [Wireshark-dev] [Wireshark-commits] rev 38606: /trunk/gtk/ /trunk/gtk/: prefs_dlg.c

2011-08-18 Thread Stephen Fisher
On Thu, Aug 18, 2011 at 10:30:40PM +0200, Joerg Mayer wrote: > I'd rather disable building with AIRPCAP. If this code is unmaintained > then this would be more appropriate. That code (should be) maintained like the rest of our regular GTK code, except that it just happens to only be built on Wi

Re: [Wireshark-dev] Provosion to filter the packets based on the value of specific protocol for custom dissector.

2011-08-18 Thread Stephen Fisher
If I understand correctly, you are proposing that Wireshark have the ability to right click on the contents of the Protocol column and select "Apply As Filter" then "Selected", which currently says "Could not acquire information to build a filter! Try expanding or choosing another item." which

Re: [Wireshark-dev] [Wireshark-commits] rev 38606: /trunk/gtk/ /trunk/gtk/: prefs_dlg.c

2011-08-18 Thread Joerg Mayer
On Thu, Aug 18, 2011 at 04:15:23PM +, sfis...@wireshark.org wrote: > http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=38606 > > User: sfisher > Date: 2011/08/18 09:15 AM > > Log: > Temporary fix to get Windows build going again: undefine > GTK_DISABLE_DEPRECATED if building

[Wireshark-dev] Provosion to filter the packets based on the value of specific protocol for custom dissector.

2011-08-18 Thread Mrunal Upadhyay
Dear All, I have created a custom dissector that helps in dissecting the packets belonging to that protocol. Now I have 2,3 protocols defined in the same plugin file. Is it possible to filter the packets based on a specific protocol value By right clicking on the protocol and applying it as fil

Re: [Wireshark-dev] why wireshark plugin does not work here - dissector_add_uint()

2011-08-18 Thread Guy Harris
On Aug 17, 2011, at 10:37 AM, John x wrote: > I am working on wireshark 1.7.0 (SVN from /trunk) ... On Aug 18, 2011, at 12:38 PM, John x wrote: > I tried both dissector_add_port() and dissector_add_uint(), but neither works. > > I am working on version 1.4.4 OK, which one are you working on -

Re: [Wireshark-dev] why wireshark plugin does not work here - dissector_add_uint()

2011-08-18 Thread John x
Hi, I tried both dissector_add_port() and dissector_add_uint(), but neither works. I am working on version 1.4.4 anyone can tell me the reason? Thanks > Date: Wed, 17 Aug 2011 19:47:33 +0200 > From: jma...@loplof.de > To: wireshark-dev@wireshark.org > Subject: Re: [Wireshark-dev] why wireshar

Re: [Wireshark-dev] Store a string in temporary tvb buffer and read it using function proto_tree_add_item

2011-08-18 Thread Guy Harris
On Aug 18, 2011, at 9:41 AM, Mrunal Upadhyay wrote: > Is there a way to store a string in a temporary tvb buffer and then in the > dissection logic use this tvb buffer in the in order to read this temporary > string using function proto_tree_add_item and assign it to one of the filter > fields

Re: [Wireshark-dev] Store a string in temporary tvb buffer and read it using function proto_tree_add_item

2011-08-18 Thread Chris Maynard
Jeff Morriss writes: > On 08/18/2011 12:41 PM, Mrunal Upadhyay wrote: > > Dear All, > > > > Is there a way to store a string in a temporary tvb buffer and then in > > the dissection logic use this tvb buffer in the in order to read this > > temporary string using function proto_tree_add_item and

Re: [Wireshark-dev] Store a string in temporary tvb buffer and read it using function proto_tree_add_item

2011-08-18 Thread Jeff Morriss
On 08/18/2011 12:41 PM, Mrunal Upadhyay wrote: Dear All, Is there a way to store a string in a temporary tvb buffer and then in the dissection logic use this tvb buffer in the in order to read this temporary string using function proto_tree_add_item and assign it to one of the filter fields. S

[Wireshark-dev] Store a string in temporary tvb buffer and read it using function proto_tree_add_item

2011-08-18 Thread Mrunal Upadhyay
Dear All, Is there a way to store a string in a temporary tvb buffer and then in the dissection logic use this tvb buffer in the in order to read this temporary string using function proto_tree_add_item and assign it to one of the filter fields. The reason for creating a temporary buffer is be

Re: [Wireshark-dev] Brutal patch to build with GTK 3.0

2011-08-18 Thread Anders Broman
Stephen Fisher skrev 2011-08-18 18:24: On Thu, Aug 18, 2011 at 03:00:23PM +0200, Anders Broman wrote: With the enclosed patch Wireshark builds on GTK3.0. Colors are messed up etc but it should be possible to start to fix things and actually see what's happening. I wouldn't be surprised if many

Re: [Wireshark-dev] Brutal patch to build with GTK 3.0

2011-08-18 Thread Stephen Fisher
On Thu, Aug 18, 2011 at 03:00:23PM +0200, Anders Broman wrote: > With the enclosed patch Wireshark builds on GTK3.0. Colors are messed > up etc but it should be possible to start to fix things and actually > see what's happening. I wouldn't be surprised if many patches leading > up to this are

Re: [Wireshark-dev] buildbot failure in Wireshark (development) on Visual-Studio-Code-Analysis

2011-08-18 Thread Stephen Fisher
On Wed, Aug 17, 2011 at 08:19:45PM +0200, Joerg Mayer wrote: > Can the maintainers of the AIRPCAP code please have a look at this? I reluctantly committed a temporary workaround that undefines GTK_DISABLE_DEPRECATED if building on Windows to get the Windows build going again: http://anonsvn.

Re: [Wireshark-dev] can't filter field in wireshark

2011-08-18 Thread Graham Bloice
On 18/08/2011 15:26, moussa.alaw...@zodiacaerospace.com wrote: > Can someone help me > > > > De :Moussa Alawieh/LES ULIS/ZDF/BTECH/ZODIAC > > -- > > > thanks for your response > > However, what you

Re: [Wireshark-dev] can't filter field in wireshark

2011-08-18 Thread Jeff Morriss
On 08/18/2011 10:10 AM, moussa.alaw...@zodiacaerospace.com wrote: thanks for your response However, what you said is very importanty for me because I have put this function in many place of my code Is there any other function that can replace the "proto_tree_add_text()" ?? Yes: any o

Re: [Wireshark-dev] can't filter field in wireshark

2011-08-18 Thread Moussa . Alawieh
Can someone help me De :Moussa Alawieh/LES ULIS/ZDF/BTECH/ZODIAC A : Developer support list for Wireshark Date : 18/08/2011 16:10 Objet : Re: [Wireshark-dev] can't filter field in wireshark thanks for your response However, what you said is very importanty for me be

Re: [Wireshark-dev] What's Going On, Here? ---

2011-08-18 Thread Graham Bloice
On 17/08/2011 20:53, t...@execpc.com wrote: > Gents --- > 17 August 2011 --- > > I just installed Wireshark on my computer, and, this is the > first time I've ever used something like this. I don't quite > know what I doing yet. > > I've attached a screen shot of what's happened. I was able to >

[Wireshark-dev] What's Going On, Here? ---

2011-08-18 Thread t...@execpc.com
Gents --- 17 August 2011 --- I just installed Wireshark on my computer, and, this is the first time I've ever used something like this. I don't quite know what I doing yet. I've attached a screen shot of what's happened. I was able to check for "promiscuous" mode in Wireshark (but I haven't th

Re: [Wireshark-dev] can't filter field in wireshark

2011-08-18 Thread Moussa . Alawieh
thanks for your response However, what you said is very importanty for me because I have put this function in many place of my code Is there any other function that can replace the "proto_tree_add_text()" ?? and do you think that it exist a way to satisfy my question in the precedent

Re: [Wireshark-dev] can't filter field in wireshark

2011-08-18 Thread Chris Maynard
writes: > I put the result in Wireshark with the > "proto_tree_add_text" > function, but it's impossible > to filter this field because it's a text ! > can someone help-me ??? > regards Don't use proto_tree_add_text(). To quote doc/README.developer: proto_tree_add_text() is used to add a

[Wireshark-dev] Brutal patch to build with GTK 3.0

2011-08-18 Thread Anders Broman
Hi, With the enclosed patch Wireshark builds on GTK3.0. Colors are messed up etc but it should be possible to start to fix things and actually see what's happening. I wouldn't be surprised if many patches leading up to this are faulty. Color handling should probably be rewritten to use GdkRGBA

[Wireshark-dev] can't filter field in wireshark

2011-08-18 Thread Moussa . Alawieh
Hello, I have got a problem in developping my wireshark's plugin in order to decommute my protocol. The problem is that : In my protocol, I have a "Time" field, and I have to add the value of this "Time" fild to the value of the field of the "Frame" protocol :"Arrival Time". I put the result i