Re: [Wireshark-dev] Question about asn2wrs

2018-11-09 Thread Craig Jackson
Darien, That is indeed the conclusion I had come to. I'll see if I can incorporate that detail in the documentation somewhere. Craig On Fri, Nov 9, 2018 at 1:34 PM Darien Spencer wrote: > Just wanted to add my 2 cents. > I believe when dealing with reassembled TCP packets the packet info you

Re: [Wireshark-dev] Question about asn2wrs

2018-11-09 Thread Darien Spencer
Just wanted to add my 2 cents. I believe when dealing with reassembled TCP packets the packet info you are accessing is that of the latest segment, since it's the one the payload will be shown in it's tree in Wireshark. If you need this information available between different ASN.1 fields of

Re: [Wireshark-dev] Anyone working on a Syncthing dissector?

2018-11-09 Thread Antoine d'Otreppe
Thanks for the additional input, github links and discussions. I took some time to explore the possible roads. (long-ish mail ahead, feel free to skip down to the conclusion) I tried making a very simple dissector in lua, reusing the existing protobuf dissector from wireshark. The protobuf

Re: [Wireshark-dev] Warning when building with latest Qt

2018-11-09 Thread Maynard, Chris
Yes, I've seen the same warning. As far as I can tell, it's because qtmain.pdb was not included in the Qt 5.11.2 installation by the Qt folks. For example, compare the presence of qtmain.pdb in: C:\Qt\5.11.1\msvc2017_64\lib\ to its notable absence in C:\Qt\5.11.2\msvc2017_64\lib\. - Chris

Re: [Wireshark-dev] Question about asn2wrs

2018-11-09 Thread Pascal Quantin
Le ven. 9 nov. 2018 à 16:27, Craig Jackson a écrit : > I think I figured out my path for this particular case. I can remember the > current attribute set, and then use custom functions for the display of > AttributeElement/attributeType and AttributeElement/attributeValue/numeric. > (I'll handle

Re: [Wireshark-dev] Question about asn2wrs

2018-11-09 Thread Craig Jackson
I think I figured out my path for this particular case. I can remember the current attribute set, and then use custom functions for the display of AttributeElement/attributeType and AttributeElement/attributeValue/numeric. (I'll handle the other choice later.) Now to choose where to store the

[Wireshark-dev] Warning when building with latest Qt

2018-11-09 Thread Anders Broman
Hi, I just got a new PC and set up the development environment. When building with Qt 5.11.2 I get 3>qtmain.lib(qtmain_win.obj) : warning LNK4099: PDB 'qtmain.pdb' was not found with 'qtmain.lib(qtmain_win.obj)' o r at 'C:\Development\wsbuild64\run\RelWithDebInfo\qtmain.pdb'; linking

Re: [Wireshark-dev] Anyone working on a Syncthing dissector?

2018-11-09 Thread Martin Mathieson via Wireshark-dev
Hi, I have a simple dissector (private) which just calls protoc --decode, reads the output from a pipe and shows the output using "data-text-lines". In my environment, I have quite a few protobuf protocols that change often. I basically have a table whose columns are: - .UDP port number -

Re: [Wireshark-dev] Anyone working on a Syncthing dissector?

2018-11-09 Thread Maciej Krüger
Hi, I have written a still WIP (but mostly abandoned) dissector for libp2p which also uses protobuf. https://github.com/mkg20001/libp2p-dissector This might give you some inspiration. Especially the CMakeLists.txt could be useful

Re: [Wireshark-dev] Anyone working on a Syncthing dissector?

2018-11-09 Thread Antoine d'Otreppe
Hi Peter, hi Anders, Thanks for the pointers! I'll look into it and report back here when I have more information on the topic. Cheers, Antoine ‐‐‐ Original Message ‐‐‐ On Friday, November 9, 2018 9:32 AM, Anders Broman wrote: > > > -Original Message- > > > From:

Re: [Wireshark-dev] Anyone working on a Syncthing dissector?

2018-11-09 Thread Anders Broman
-Original Message- >From: Wireshark-dev On Behalf Of Peter >Wu >Sent: den 9 november 2018 00:22 >To: Antoine d'Otreppe ; Developer support list for >Wireshark >Subject: Re: [Wireshark-dev] Anyone working on a Syncthing dissector? > >Hi Antoine! > >Based on the specifications for